Read the docs

Martin Gibson

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Martin Gibson records in CISA KEV

No Martin Gibson vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ideapush 8 records MEDIUM Wp Gotowebinar 1 record LOW

Records

8 records in Ideapush · all components

TI-2025-18324 CVE-2025-24607 · GHSA-7496-f98j-6hw7

WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through <= 8.71.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2025-02-14 No fix listed CWE-862
TI-2024-24965 CVE-2024-37461 · GHSA-rxm4-rcrf-9vfm

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-21 No fix listed CWE-79
TI-2024-24780 CVE-2024-37265 · GHSA-99g9-vr9j-hgpq

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79
TI-2024-29630 CVE-2024-44041 · GHSA-77f2-638h-7wm4

WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through <= 8.66.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-06 No fix listed CWE-79
TI-2023-26604 CVE-2023-48774 · GHSA-f47g-ccch-6353

WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00482 Published 2024-12-09 Fixed in 8.58 CWE-862
TI-2024-10988 CVE-2024-11844 · GHSA-j66f-9h25-hw6j

IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion

Priority LOW 20

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-03 No fix listed CWE-862
Open these records in search →