Vulnerabilities

TI-2023-10771 CVE-2023-25461 · GHSA-j4g2-785h-m856

WordPress Wp-Insert Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in namithjawahar Wp-Insert plugin <= 2.5.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79

TI-2018-12519 CVE-2018-17573 · GHSA-qxjw-jm8v-p8q2

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code…

MEDIUM 48

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code because of the exposure and configuration of FCKeditor under fckeditor/editor/filemanager/browser/default/browser.html, fckeditor/edito…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03364 Published 2018-09-28 No fix listed CWE-434

Vulnerabilities

Filters

WordPress Wp-Insert Plugin <= 2.5.0 is vulnerable to Cross Site Scripting (XSS)

The Wp-Insert plugin through 2.4.2 for WordPress allows upload of arbitrary PHP code…