Vulnerabilities

TI-2023-08849 CVE-2023-22674 · GHSA-wrq3-v46f-59mp

WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control

LOW 38

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Hal Gatewood Dashicons + Custom Post Types.This issue affects Dashicons + Custom Post Types: from n/a through 1.0.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00255 Published 2023-12-21 No fix listed CWE-352

TI-2023-05284 CVE-2023-5745 · GHSA-3636-v8hq-c8g3

Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

LOW 25

The Reusable Text Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'text-blocks' shortcode in versions up to, and including, 1.5.3 due to insufficient input sanitization and output escaping on…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00512 Published 2023-10-24 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Dashicons + Custom Post Types Plugin <= 1.0.2 is vulnerable to Broken Access Control

Reusable Text Blocks <= 1.5.3 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode