Vulnerabilities

TI-2021-07181 CVE-2021-24901 · GHSA-g7jw-j9m6-wpxm

Security Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting

LOW 30

The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.05063 Published 2022-02-28 No fix listed CWE-79

TI-2015-05727 CVE-2015-6828 · GHSA-qfx4-q5f8-hx88

The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin…

LOW 34

The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man-in-the-middle attack…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01907 Published 2015-09-16 No fix listed CWE-20

Vulnerabilities

Filters

Security Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting

The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin…