Vulnerabilities

TI-2024-18051 CVE-2024-27196 · GHSA-x69q-xg96-5x9w

WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Cross Site Scripting (XSS) vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue affects postMash – custom post order: from n/a through 1.2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00351 Published 2024-03-15 No fix listed CWE-79

TI-2024-17027 CVE-2024-25927 · GHSA-4p49-v2x9-3g3j

WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection

MEDIUM 43

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Joel Starnes postMash – custom post order.This issue affects postMash – custom post order: from n/a through 1.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00565 Published 2024-02-28 No fix listed CWE-89

Vulnerabilities

Filters

WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability

WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection