Vulnerabilities

TI-2024-28900 CVE-2024-43247 · GHSA-qj78-v57f-v8c2

WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

MEDIUM 40

Missing Authorization vulnerability in creativeon WHMpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WHMpress: from n/a through 6.2-revision-5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00444 Published 2024-08-19 No fix listed CWE-862

TI-2024-28899 CVE-2024-43246 · GHSA-3m59-fh79-m7m6

WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-08-18 No fix listed CWE-79

Vulnerabilities

Filters

WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability