Vulnerabilities

TI-2008-04517 CVE-2008-4734 · GHSA-433v-vgvp-w55j

Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in…

LOW 35

Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a r…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0122 Published 2008-10-24 No fix listed CWE-352

TI-2008-04516 CVE-2008-4733 · GHSA-cxqg-gpwj-m747

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin…

LOW 24

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext,…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02142 Published 2008-10-24 No fix listed CWE-79

TI-2008-04515 CVE-2008-4732 · GHSA-rg9h-pjp2-v552

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before…

LOW 39

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03468 Published 2008-10-24 No fix listed CWE-89

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in…

Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin…

SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before…