Read the docs

WP Zinc

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WP Zinc records in CISA KEV

No WP Zinc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Page Generator 2 records LOW

Records

2 records in Page Generator · all components

TI-2023-28570 CVE-2023-52131 · GHSA-9wq3-cm9g-hpvq

WordPress Page Generator Plugin <= 1.7.1 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Zinc Page Generator.This issue affects Page Generator: from n/a through 1.7.1.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00541 Published 2023-12-31 No fix listed CWE-89
TI-2022-01943 CVE-2022-2100 · GHSA-hph2-3gwc-9fvg

Page Generator Plugin < 1.6.5 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-07-17 Fixed in 1.6.5 CWE-79
Open these records in search →