Vulnerabilities

TI-2024-23101 CVE-2024-34814 · GHSA-fq2p-4p8g-3975

WordPress Unyson plugin <=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Unyson Unyson unyson.This issue affects Unyson: from n/a through <= 2.7.29.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00249 Published 2024-05-10 No fix listed CWE-352

TI-2023-23966 CVE-2023-44472 · GHSA-pc9r-c3qx-2pj3

WordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in ThemeFuse Unyson.This issue affects Unyson: from n/a through 2.7.28.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00402 Published 2024-05-03 No fix listed CWE-862

TI-2022-02049 CVE-2022-2219 · GHSA-m2p3-xwpx-wqc4

Unyson < 2.7.27 - Reflected Cross-Site Scripting

LOW 35

The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.01686 Published 2022-07-25 Fixed in 2.7.27 CWE-79

Vulnerabilities

Filters

WordPress Unyson plugin <=2.7.29 - Cross Site Request Forgery (CSRF) vulnerability

WordPress Unyson plugin <= 2.7.28 - Broken Access Control vulnerability

Unyson < 2.7.27 - Reflected Cross-Site Scripting