AdminColumns

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

AdminColumns records in CISA KEV

No AdminColumns vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Admin Columns 3 records MEDIUM

Records

3 records

TI-2021-06658 CVE-2021-24366 · GHSA-hrfw-7pg5-g3x6

Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label

MEDIUM 58

The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin to perform Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00997 Published 2021-06-21 Fixed in 4.3, 5.5.1

TI-2019-13183 CVE-2019-17661 · GHSA-46x4-34f2-j42g

A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for…

MEDIUM 45

A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0239 Published 2019-11-08 No fix listed CWE-1236

TI-2021-06657 CVE-2021-24365 · GHSA-q7j6-278p-wvrh

Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field

LOW 26

The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for tables.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00932 Published 2021-07-12 Fixed in 4.3.2, 5.5.2 CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0