Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Riverside Component: Http Headers Clear all filters
TI-2023-01142 CVE-2023-1208 · GHSA-g93m-hx8j-2qmq

HTTP Headers < 1.18.11 - Admin+ Remote Code Execution

Priority HIGH 67

This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01716 Published 2023-07-10 Fixed in 1.18.11
TI-2023-01141 CVE-2023-1207 · GHSA-qh8g-3pfr-79x6

HTTP Headers < 1.18.8 - Admin+ SQL Injection

Priority HIGH 67

This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerability.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00885 Published 2023-05-15 Fixed in 1.18.8