Vulnerabilities

TI-2017-13716 CVE-2017-18543 · GHSA-c997-chgq-qrrw

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

MEDIUM 46

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01825 Published 2019-08-16 No fix listed CWE-284

TI-2017-13717 CVE-2017-18544 · GHSA-9h4w-qvw3-x7mw

LOW 39

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00649 Published 2019-08-16 No fix listed CWE-352

TI-2017-13718 CVE-2017-18545 · GHSA-jmx4-q2wx-5gqj

LOW 36

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01326 Published 2019-08-16 No fix listed CWE-20