Vulnerabilities

TI-2025-37406 CVE-2025-60040 · GHSA-pmfp-vj4p-h7qc

WordPress wp-mpdf Plugin <= 3.9.1 - Cross Site Scripting (XSS) Vulnerability

LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in fkrauthan wp-mpdf wp-mpdf allows Stored XSS.This issue affects wp-mpdf: from n/a through <= 3.9.1.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00215 Published 2025-09-26 No fix listed CWE-79

TI-2024-18565 CVE-2024-27962 · GHSA-9pxg-gf82-j5w9

WordPress wp-mpdf plugin <= 3.7.1 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Florian 'fkrauthan' Krauthan allows Reflected XSS.This issue affects wp-mpdf: from n/a through 3.7.1.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00397 Published 2024-03-21 No fix listed CWE-79

TI-2021-03273 CVE-2021-4416 · GHSA-pmjg-6h25-mhp4

wp-mpdf <= 3.5.1 - Cross-Site Request Forgery Bypass

LOW 20

The wp-mpdf plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00384 Published 2023-07-12 No fix listed CWE-352

TI-2008-02427 CVE-2008-2535 · GHSA-9rc3-2cjg-22wf

Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow…

LOW 35

Multiple SQL injection vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to execute arbitrary SQL commands via the del parameter to (1) gbuch.admin.php, (2) links.admin.php, (3) menue.admi…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00928 Published 2008-06-03 No fix listed CWE-89

TI-2008-02426 CVE-2008-2534 · GHSA-w8hm-wq79-p943

Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2…

LOW 37

Directory traversal vulnerability in admin/admin_frame.php in Phoenix View CMS Pre Alpha2 and earlier allows remote attackers to include and execute arbitrary local files via a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02405 Published 2008-06-03 No fix listed CWE-22

TI-2008-02425 CVE-2008-2533 · GHSA-m2mr-h6fr-3fxf

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Phoenix View CMS Pre Alpha2 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) ltarget parameter to (a) admin/admin_frame.php and…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01445 Published 2008-06-03 No fix listed CWE-79