Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: amu02aftab Component: Category And Taxonomy Meta Fields Clear all filters
TI-2024-08896 CVE-2024-9589 · GHSA-j7jm-7vmw-wgv8

Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

Priority LOW 25

The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'new_meta_name' parameter in the 'wpaft_option_page' function in versions up to, and including, 1.0.0 due to…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00278 Published 2024-10-22 No fix listed CWE-79
TI-2024-08897 CVE-2024-9590 · GHSA-xcmp-v444-vq94

Category and Taxonomy Meta Fields <= 1.0.0 - Authenticated (Editor+) Stored Cross-Site Scripting

Priority LOW 25

The Category and Taxonomy Meta Fields plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the image meta field value in the 'wpaft_add_meta_textinput' function in versions up to, and including, 1.0.0 du…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00278 Published 2024-10-22 No fix listed CWE-79