Vulnerabilities

TI-2024-07504 CVE-2024-8092 · GHSA-36xh-276f-w5j9

Accordion Image Menu <= 3.1.3 - Stored XSS via CSRF

MEDIUM 58

The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payload…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00193 Published 2024-09-17 No fix listed CWE-352

TI-2023-19780 CVE-2023-38396 · GHSA-j2g2-8vg3-fw5r

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00252 Published 2023-10-03 No fix listed CWE-352

TI-2023-18508 CVE-2023-36693 · GHSA-9x5j-45q3-wgc4

WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352

TI-2023-17862 CVE-2023-35772 · GHSA-qqg7-53fv-p4rh

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <= 3.1.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-06-19 No fix listed CWE-79

Vulnerabilities

Filters

Accordion Image Menu <= 3.1.3 - Stored XSS via CSRF

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress WP RSS Images Plugin <= 1.1 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Google Map Shortcode Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)