Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: WP Hardening – Fix Your WordPress Security 1.2.2 Clear all filters
TI-2021-06665 CVE-2021-24373 · GHSA-fvfr-gwjc-3cpp

WP Hardening < 1.2.2 - Reflected XSS via historyvalue

Priority LOW 29

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripti…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-06-21 Fixed in 1.2.2 CWE-79
TI-2021-06664 CVE-2021-24372 · GHSA-2jhr-3qvp-vx32

WP Hardening < 1.2.2 - Reflected XSS via URI

Priority LOW 29

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the $_SERVER['REQUEST_URI'] before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-06-21 Fixed in 1.2.2 CWE-79