Vulnerabilities

TI-2024-09324 CVE-2024-10048 · GHSA-7h3h-22m6-hvwq

Post Status Notifier Lite and Premium <= 1.11.6 - Reflected Cross-Site Scripting via page

LOW 27

The Post Status Notifier Lite and Premium plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘page’ parameter in all versions up to, and including, 1.11.6 due to insufficient input sanitization…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00317 Published 2024-10-29 No fix listed CWE-79

TI-2024-07860 CVE-2024-8478 · GHSA-w888-5jpq-hwqc

Affiliate Super Assistent <= 1.5.3 - Unauthenticated Arbitrary Shortcode Execution

LOW 39

The The Affiliate Super Assistent plugin for WordPress is vulnerable to arbitrary shortcode execution in all versions up to, and including, 1.5.3.

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.0063 Published 2024-09-10 No fix listed CWE-94

TI-2023-25876 CVE-2023-47766 · GHSA-6jv5-5474-fcpr

WordPress Post Status Notifier Lite Plugin <= 1.11.0 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Timo Reith Post Status Notifier Lite plugin <= 1.11.0 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-22 No fix listed CWE-79

TI-2023-12149 CVE-2023-27417 · GHSA-2pxh-r3qf-h5ww

WordPress Affiliate Super Assistent Plugin <= 1.5.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Timo Reith Affiliate Super Assistent plugin <= 1.5.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00333 Published 2023-11-12 No fix listed CWE-352

TI-2022-03961 CVE-2022-4325 · GHSA-wx4c-354q-hcvc

Post Status Notifier Lite < 1.10.1 - Reflected XSS

MEDIUM 60

The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high priv…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00912 Published 2023-01-09 Fixed in 1.10.1