Vulnerabilities

TI-2022-22620 CVE-2022-45816 · GHSA-2wph-jf27-55c8

WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

LOW 25

Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00446 Published 2022-12-06 No fix listed CWE-79

TI-2015-04613 CVE-2015-5482 · GHSA-7f5w-c832-qffq

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for…

LOW 22

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a ..

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01806 Published 2015-08-18 No fix listed CWE-22

TI-2015-04612 CVE-2015-5481 · GHSA-whw5-qj7m-h5gh

Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress…

LOW 24

Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab parameter in the gdbbp…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02055 Published 2015-08-18 No fix listed CWE-79

Vulnerabilities

Filters

WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS)

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for…

Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress…