Vulnerabilities

TI-2024-22379 CVE-2024-33909 · GHSA-76v8-3vp7-9g3p

WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Avirtum iPages Flipbook allows Exploiting Incorrectly Configured Access Control Security Levels.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00249 Published 2026-06-17 No fix listed CWE-862

TI-2024-25924 CVE-2024-38690 · GHSA-4q96-h8mr-4mvm

WordPress iPanorama 360 plugin <= 1.8.3 - Broken Access Control vulnerability

LOW 30

Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects iPanorama 360 WordPress Virtual Tour Builder:…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0042 Published 2024-11-01 No fix listed CWE-862

TI-2024-04417 CVE-2024-4744 · GHSA-7682-crgj-3p5h

WordPress iPages Flipbook plugin <= 1.5.1 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in Avirtum iPages Flipbook.This issue affects iPages Flipbook: from n/a through 1.5.1.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0025 Published 2024-06-10 No fix listed CWE-862

TI-2024-21653 CVE-2024-32779 · GHSA-cq4c-8hpc-gx3j

WordPress Vision – Image Map Builder plugin <= 1.7.1 - Broken Access Control vulnerability

LOW 24

Missing Authorization vulnerability in Avirtum Vision Interactive.This issue affects Vision Interactive: from n/a through 1.7.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00345 Published 2024-06-09 No fix listed CWE-862

TI-2024-22411 CVE-2024-33941 · GHSA-44pf-j36r-3g58

WordPress iPanorama 360 plugin <= 1.8.1 - Broken Access Control vulnerability

LOW 32

Missing Authorization vulnerability in Avirtum iPanorama 360 WordPress Virtual Tour Builder.This issue affects iPanorama 360 WordPress Virtual Tour Builder: from n/a through 1.8.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00421 Published 2024-05-03 No fix listed CWE-862

TI-2023-25554 CVE-2023-47236 · GHSA-g3jr-x8v9-67fh

WordPress iPages Flipbook Plugin <= 1.4.8 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum iPages Flipbook For WordPress.This issue affects iPages Flipbook For WordPress: from n/a through 1.4.8.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0054 Published 2023-12-20 No fix listed CWE-89

TI-2023-25294 CVE-2023-46823 · GHSA-jc9g-7x7r-c8w7

WordPress ImageLinks Interactive Image Builder Plugin <= 1.5.4 is vulnerable to SQL Injection

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Avirtum ImageLinks Interactive Image Builder for WordPress allows SQL Injection.This issue affects ImageLinks Interact…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.0097 Published 2023-11-06 No fix listed CWE-89

TI-2023-04909 CVE-2023-5336 · GHSA-f35c-gw68-7hgr

iPanorama 360 – WordPress Virtual Tour Builder <= 1.8.0 - Authenticated (Contributor+) SQL Injection via Shortcode

MEDIUM 41

The iPanorama 360 – WordPress Virtual Tour Builder plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 1.8.0 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00802 Published 2023-10-19 No fix listed CWE-89

TI-2023-22334 CVE-2023-41949 · GHSA-m43v-v86m-9wxf

WordPress iFolders Plugin <= 1.5.0 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Avirtum iFolders plugin <= 1.5.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00362 Published 2023-09-25 No fix listed CWE-79

TI-2022-04021 CVE-2022-4393 · GHSA-xw4v-hwgc-348v

ImageLinks Interactive Image Builder for WordPress <= 1.5.3 - Contributor+ Stored XSS

LOW 25

The ImageLinks Interactive Image Builder for WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks e…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-09 No fix listed CWE-79

Vulnerabilities

Filters