Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

8 records

Vendor: Martin Gibson Component: Ideapush Clear all filters
TI-2025-18324 CVE-2025-24607 · GHSA-7496-f98j-6hw7

WordPress IdeaPush plugin <= 8.71 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Northern Beaches Websites IdeaPush ideapush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through <= 8.71.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00397 Published 2025-02-14 No fix listed CWE-862
TI-2023-26604 CVE-2023-48774 · GHSA-f47g-ccch-6353

WordPress IdeaPush plugin < 8.58 - Broken Access Control vulnerability

Priority LOW 25

Missing Authorization vulnerability in Martin Gibson IdeaPush allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IdeaPush: from n/a through n/a.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00482 Published 2024-12-09 Fixed in 8.58 CWE-862
TI-2024-10988 CVE-2024-11844 · GHSA-j66f-9h25-hw6j

IdeaPush <= 8.71 - Missing Authorization to Board Term Deletion

Priority LOW 20

The IdeaPush plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the idea_push_taxonomy_save_routine function in all versions up to, and including, 8.71.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-12-03 No fix listed CWE-862
TI-2024-29630 CVE-2024-44041 · GHSA-77f2-638h-7wm4

WordPress IdeaPush plugin <= 8.66 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Northern Beaches Websites IdeaPush ideapush allows Stored XSS.This issue affects IdeaPush: from n/a through <= 8.66.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00276 Published 2024-10-06 No fix listed CWE-79
TI-2024-24780 CVE-2024-37265 · GHSA-99g9-vr9j-hgpq

WordPress IdeaPush plugin <= 8.60 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.60.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-07-22 No fix listed CWE-79
TI-2024-24965 CVE-2024-37461 · GHSA-rxm4-rcrf-9vfm

WordPress IdeaPush plugin <= 8.65 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Martin Gibson IdeaPush allows Stored XSS.This issue affects IdeaPush: from n/a through 8.65.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00327 Published 2024-07-21 No fix listed CWE-79