Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: WP Spell Check Component: Wpspellcheck Clear all filters
TI-2022-02458 CVE-2022-2658 · GHSA-3p9v-8h44-8rrr

WP Spell Check < 9.13 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The WP Spell Check WordPress plugin before 9.13 does not escape ignored words, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00475 Published 2023-01-16 Fixed in 9.13
TI-2019-04316 CVE-2019-6027 · GHSA-652g-mfhf-979g

Cross-site request forgery in WP Spell Check

Priority LOW 39

Cross-site request forgery (CSRF) vulnerability in WP Spell Check 7.1.9 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00678 Published 2019-12-26 No fix listed CWE-352