Vulnerabilities

TI-2023-17012 CVE-2023-34168 · GHSA-9g4p-qmx2-m5mj

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection

MEDIUM 40

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Alex Raven WP Report Post allows SQL Injection.This issue affects WP Report Post: from n/a through 2.1.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00902 Published 2023-12-18 No fix listed CWE-89

TI-2023-17015 CVE-2023-34171 · GHSA-qgrp-vp5r-mc7p

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-09 No fix listed CWE-352

TI-2023-24543 CVE-2023-45769 · GHSA-992r-442f-c792

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

LOW 32

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alex Raven WP Report Post plugin <= 2.1.2 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00548 Published 2023-10-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to SQL Injection

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress WP Report Post Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)