Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: maxfoundry Component: Wp-paginate Clear all filters
TI-2022-01899 CVE-2022-2050 · GHSA-jh8v-8pj3-4hv2

WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-07-11 Fixed in 2.1.9 CWE-79
TI-2021-03085 CVE-2021-4222 · GHSA-5xxx-9gqj-f6pv

WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 24

The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallo…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0081 Published 2022-02-28 Fixed in 2.1.4 CWE-79