Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Acnam Clear all filters
TI-2022-02677 CVE-2022-2887 · GHSA-484m-6228-v3ch

WP Server Health Stats < 1.7.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The WP Server Health Stats WordPress plugin before 1.7.0 does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is di…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00677 Published 2022-09-16 Fixed in 1.7.0 CWE-79
TI-2022-00130 CVE-2022-0191 · GHSA-73g4-9x7g-2w6j

Ad Invalid Click Protector (AICP) < 1.2.7 - Arbitrary Ban Deletion via CSRF

Priority LOW 30

The Ad Invalid Click Protector (AICP) WordPress plugin before 1.2.7 does not have CSRF check deleting banned users, which could allow attackers to make a logged in admin remove arbitrary bans

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00582 Published 2022-05-02 Fixed in 1.2.7 CWE-352