Vulnerabilities

TI-2023-19428 CVE-2023-37996 · GHSA-mhqj-jv9m-4584

WordPress GTmetrix for WordPress Plugin <= 0.4.7 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.7 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

TI-2023-15785 CVE-2023-32503 · GHSA-28mp-cr2q-8xfm

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.6 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-08-08 No fix listed CWE-79

TI-2023-09491 CVE-2023-23677 · GHSA-vvw6-hvh9-5fcq

LOW 27

Reflected Cross-Site Scripting (XSS) vulnerability in GTmetrix GTmetrix for WordPress plugin <= 0.4.5 versions.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00369 Published 2023-03-30 No fix listed CWE-79