Vulnerabilities

TI-2022-19060 CVE-2022-40193 · GHSA-gm96-5f79-f6q3

WordPress Awesome Filterable Portfolio plugin <= 1.9.7 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 28

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00619 Published 2022-09-23 No fix listed CWE-79

TI-2022-15918 CVE-2022-35238 · GHSA-6mqc-jm93-59f3

LOW 36

Unauthenticated Plugin Settings Change vulnerability in Awesome Filterable Portfolio plugin <= 1.9.7 at WordPress.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00715 Published 2022-09-23 No fix listed CWE-264

TI-2015-07838 CVE-2015-9461 · GHSA-834v-68v2-5mqq

LOW 35

The awesome-filterable-portfolio plugin before 1.9 for WordPress has afp_get_new_portfolio_item_page SQL injection via the item_id parameter.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01918 Published 2019-10-10 No fix listed CWE-89