Vulnerabilities

TI-2021-06657 CVE-2021-24365 · GHSA-q7j6-278p-wvrh

Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field

LOW 26

The Admin Columns WordPress plugin Free before 4.3.2 and Pro before 5.5.2 allowed to configure individual columns for tables.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00932 Published 2021-07-12 Fixed in 4.3.2, 5.5.2 CWE-79

TI-2021-06658 CVE-2021-24366 · GHSA-hrfw-7pg5-g3x6

Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label

MEDIUM 58

The Admin Columns WordPress plugin before 4.3 and Admin Columns Pro WordPress plugin before 5.5.1 do not sanitise and escape its Label settings, which could allow high privilege users such as admin to perform Stored Cros…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00997 Published 2021-06-21 Fixed in 4.3, 5.5.1

TI-2019-13183 CVE-2019-17661 · GHSA-46x4-34f2-j42g

A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for…

MEDIUM 45

A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for WordPress allows malicious users to gain remote control of other computers.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0239 Published 2019-11-08 No fix listed CWE-1236

Vulnerabilities

Filters

Admin Columns Free (< 4.3.2) & Pro (< 5.5.2) - Authenticated Stored Cross-Site Scripting (XSS) in Custom Field

Admin Columns Free < 4.3 & Pro < 5.5.1 - Admin+ Stored XSS in Label

A CSV injection in the codepress-admin-columns (aka Admin Columns) plugin 3.4.6 for…