Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Tri Component: Gigpress Clear all filters
TI-2023-06617 CVE-2023-7233 · GHSA-jwrr-v799-mj78

GigPress <= 2.3.29 - Admin+ Stored Cross Site Scripting

Priority MEDIUM 55

The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00456 Published 2024-02-12 No fix listed CWE-79
TI-2023-00365 CVE-2023-0381 · GHSA-2php-mg3p-mcqg

GigPress <= 2.3.28 - Subscriber+ SQLi

Priority HIGH 73

The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could allow any authenticated users, such as subscriber to perform SQ…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01301 Published 2023-02-27 No fix listed
TI-2022-04355 CVE-2022-4759 · GHSA-rr77-8cxr-6h8g

GigPress < 2.3.28 - Contributor+ Stored XSS via Shortcode

Priority HIGH 65

The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contribu…

CVSS 3.1MEDIUM 6.8 Network High privileges User interaction EPSS 0.00707 Published 2023-02-13 Fixed in 2.3.28
TI-2015-03427 CVE-2015-4066 · GHSA-4394-5727-8668

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin…

Priority LOW 36

Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbitrary SQL commands via the (1) show_artist_id or (2) show_ven…

CVSS 2.0MEDIUM 6.5 Network Low privileges Interaction — EPSS 0.04238 Published 2015-05-27 No fix listed CWE-89