Vulnerabilities

TI-2024-09793 CVE-2024-10571 · GHSA-c7vx-2f2q-xpfw

Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

MEDIUM 57

The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04809 Published 2024-11-14 No fix listed CWE-98

TI-2023-25697 CVE-2023-47526 · GHSA-4cc8-vm39-7vqf

WordPress Chartify Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chart Builder Team Chartify – WordPress Chart Plugin allows Stored XSS.This issue affects Chartify – WordPress Chart P…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00316 Published 2024-02-12 No fix listed CWE-79

Vulnerabilities

Filters

Chartify – WordPress Chart Plugin <= 2.9.5 - Unauthenticated Local File Inclusion via source

WordPress Chartify Plugin <= 2.0.6 is vulnerable to Cross Site Scripting (XSS)