Vulnerabilities

TI-2024-29536 CVE-2024-43947 · GHSA-298q-cxp8-5c9m

WordPress WP Armour Extended plugin <= 1.26 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00183 Published 2024-08-29 No fix listed CWE-352

TI-2024-29537 CVE-2024-43948 · GHSA-3pcg-3m3w-7636

WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability

MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00307 Published 2024-08-29 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Armour Extended plugin <= 1.26 - Cross Site Request Forgery (CSRF) vulnerability

WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability