Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: edge22 Component: Generatepress Clear all filters
TI-2024-03234 CVE-2024-3469 · GHSA-6crp-pv4g-xcj8

GP Premium <= 2.4.0 - Reflected Cross-Site Scripting

Priority LOW 28

The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00637 Published 2024-06-05 No fix listed CWE-79
TI-2023-06219 CVE-2023-6807 · GHSA-xp6q-36fr-27p3

GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta

Priority LOW 29

The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta output in all versions up to, and including, 2.3.2 due to insufficient input sanitization and outpu…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00451 Published 2024-02-05 No fix listed CWE-79