Martin Gibson

Records20All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Martin Gibson records in CISA KEV

No Martin Gibson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ideapush 8 records MEDIUM Wp Gotowebinar 1 record LOW

Records

20 records

TI-2025-18324 CVE-2025-24607 · GHSA-7496-f98j-6hw7

WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability

MEDIUM 48

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through <= 8.71.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2025-02-14 No fix listed CWE-862

TI-2023-25555 CVE-2023-47237 · GHSA-4j52-999q-vxgg

WordPress WP Google My Business Auto Publish Plugin <= 3.7 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson Auto Publish for Google My Business plugin <= 3.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0027 Published 2023-11-09 No fix listed CWE-352

TI-2024-32868 CVE-2024-49275 · GHSA-6qpx-rmj4-mcj5

WordPress IdeaPush plugin <= 8.69 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Northern Beaches Websites IdeaPush ideapush allows Cross Site Request Forgery.This issue affects IdeaPush: from n/a through <= 8.69.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-10-20 No fix listed CWE-352

TI-2024-24965 CVE-2024-37461 · GHSA-rxm4-rcrf-9vfm

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-21 No fix listed CWE-79

TI-2024-26010 CVE-2024-38776 · GHSA-3rvv-226f-xrr5

WordPress WP GoToWebinar plugin <= 15.7 - CSRF to XSS vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in Martin Gibson WP GoToWebinar allows Cross-Site Scripting (XSS).This issue affects WP GoToWebinar: from n/a through 15.7.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00158 Published 2024-08-02 No fix listed CWE-352

TI-2024-25906 CVE-2024-38671 · GHSA-5xmw-q86v-8vpg

WordPress WP GoToWebinar plugin <= 15.7 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson WP GoToWebinar allows Stored XSS.This issue affects WP GoToWebinar: from n/a through 15.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-07-20 No fix listed CWE-79

TI-2026-25049 CVE-2026-32521 · GHSA-qchc-j443-vmp6

WordPress WP Custom Admin Interface plugin <= 7.42 - Cross Site Scripting (XSS) vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows DOM-Based XSS.This issue affects…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00167 Published 2026-03-25 No fix listed CWE-79

TI-2024-24780 CVE-2024-37265 · GHSA-99g9-vr9j-hgpq

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

LOW 28

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79

TI-2023-25504 CVE-2023-47181 · GHSA-gj94-rc7p-wwm6

WordPress IdeaPush Plugin <= 8.52 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson IdeaPush plugin <= 8.52 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-11-08 No fix listed CWE-79

TI-2023-24592 CVE-2023-45832 · GHSA-f786-pr7j-f76x

WordPress WP GoToWebinar Plugin <= 14.45 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Martin Gibson WP GoToWebinar plugin <= 14.45 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00509 Published 2023-10-24 No fix listed CWE-79

TI-2024-29630 CVE-2024-44041 · GHSA-77f2-638h-7wm4

WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through <= 8.66.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-06 No fix listed CWE-79

TI-2023-26604 CVE-2023-48774 · GHSA-f47g-ccch-6353

WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability

LOW 25

Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00482 Published 2024-12-09 Fixed in 8.58 CWE-862

TI-2024-21671 CVE-2024-32797 · GHSA-4r5q-wgf5-6r7g

WordPress WP LinkedIn Auto Publish plugin <= 8.11 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Martin Gibson WP LinkedIn Auto Publish.This issue affects WP LinkedIn Auto Publish: from n/a through 8.11.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00314 Published 2024-06-09 No fix listed CWE-862

TI-2025-39186 CVE-2025-63038 · GHSA-vjhr-4rwp-pw28

WordPress WP Custom Admin Interface plugin <= 7.40 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Ad…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00239 Published 2025-12-31 No fix listed CWE-862

TI-2024-25929 CVE-2024-38695 · GHSA-3f24-8wqg-chhj

WordPress WP GoToWebinar plugin <= 15.6 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP GoToWebinar: from n/a through 15.6.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00404 Published 2024-11-01 No fix listed CWE-862

TI-2024-21678 CVE-2024-32804 · GHSA-6722-5x9x-9h26

WordPress WP GoToWebinar plugin <= 14.46 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP GoToWebinar.This issue affects WP GoToWebinar: from n/a through 14.46.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00406 Published 2024-06-09 No fix listed CWE-862

TI-2024-10988 CVE-2024-11844 · GHSA-j66f-9h25-hw6j

IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion

LOW 20

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-03 No fix listed CWE-862

TI-2023-25873 CVE-2023-47763 · GHSA-rqfj-2r57-4f86

WordPress WP Custom Admin Interface plugin <= 7.31 - Broken Access Control vulnerability

LOW 20

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00367 Published 2024-12-09 No fix listed CWE-862

TI-2023-24050 CVE-2023-44988 · GHSA-86fm-wq4c-m3q9

WordPress WP Custom Admin Interface plugin <= 7.32 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00337 Published 2025-01-02 No fix listed CWE-862

TI-2026-20196 CVE-2026-25011 · GHSA-wx22-gmgf-5j2h

WordPress WP Custom Admin Interface plugin <= 7.41 - Broken Access Control vulnerability

LOW 19

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00196 Published 2026-02-03 No fix listed CWE-862

Open these records in search →