Wpadminify

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wpadminify records in CISA KEV

No Wpadminify vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Adminify 3 records MEDIUM

Records

3 records

TI-2023-03767 CVE-2023-4060 · GHSA-c6hq-wqj7-xffp

WP Adminify < 3.1.6 - Admin+ Stored XSS

MEDIUM 55

The WP Adminify WordPress plugin before 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00466 Published 2023-09-11 Fixed in 3.1.6

TI-2023-28571 CVE-2023-52132 · GHSA-pm97-4h32-f6p7

WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adminify.This issue affects WP Adminify: from n/a through 3.1.6.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2023-12-31 No fix listed CWE-89

TI-2023-23792 CVE-2023-44266 · GHSA-8jjv-wx3r-m7x9

WordPress WP Adminify Plugin <= 3.1.6 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jewel Theme WP Adminify plugin <= 3.1.6 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00392 Published 2023-10-02 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0