Vulnerabilities

TI-2023-21404 CVE-2023-40606 · GHSA-32mh-vqmr-g449

WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution

MEDIUM 43

Improper Control of Generation of Code ('Code Injection') vulnerability in Kanban for WordPress Kanban Boards for WordPress.This issue affects Kanban Boards for WordPress: from n/a through 2.5.21.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0082 Published 2023-12-29 No fix listed CWE-94

TI-2023-00828 CVE-2023-0873 · GHSA-8j78-9w7g-w7xq

Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS

MEDIUM 55

The Kanban Boards for WordPress plugin before 2.5.21 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the un…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00548 Published 2023-06-27 Fixed in 2.5.21

TI-2023-09683 CVE-2023-23884 · GHSA-x8v3-q4x3-mq7p

WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kanban for WordPress Kanban Boards for WordPress plugin <= 2.5.20 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-05-09 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Kanban Boards for WordPress Plugin <= 2.5.21 is vulnerable to Arbitrary Code Execution

Kanban Boards for WordPress < 2.5.21 - Admin+ Stored XSS

WordPress Kanban Boards for WordPress Plugin <= 2.5.20 is vulnerable to Cross Site Scripting (XSS)