Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Simplysymphony Component: Plugnedit Clear all filters
TI-2015-07800 CVE-2015-9423 · GHSA-fr94-g22x-67pj

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via…

Priority LOW 27

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load PlugneditBGColor, PlugneditEditorMargin, plugnedit_width, pnemedcount,…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01044 Published 2019-09-26 No fix listed CWE-79
TI-2015-07799 CVE-2015-9422 · GHSA-636m-qxqr-38vj

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant…

Priority LOW 30

The PlugNedit Adaptive Editor plugin before 6.2.0 for WordPress has CSRF with resultant XSS via wp-admin/admin-ajax.php?action=simple_fields_field_type_post_dialog_load plugnedit_width, pnemedcount, PlugneditBGColor, Plu…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00859 Published 2019-09-26 No fix listed CWE-352