Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Community by PeepSo 6.3.1.2 Clear all filters
TI-2023-06513 CVE-2023-7125 · GHSA-37m7-jq3g-46vx

Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF

Priority LOW 20

The Community by PeepSo WordPress plugin before 6.3.1.2 does not have CSRF check when creating a user post (visible on their wall in their profile page), which could allow attackers to make logged in users perform such a…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00237 Published 2024-01-16 Fixed in 6.3.1.2 CWE-352
TI-2024-00169 CVE-2024-0187 · GHSA-9m8r-h264-rvx5

Community by PeepSo < 6.3.1.2 - Reflected XSS

Priority MEDIUM 60

The Community by PeepSo WordPress plugin before 6.3.1.2 does not sanitise and escape various parameters and generated URLs before outputting them back attributes, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00515 Published 2024-01-16 Fixed in 6.3.1.2 CWE-79