Vulnerabilities

TI-2024-37051 CVE-2024-56015 · GHSA-7v7x-8p54-6fgp

WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in John Godley Tidy Up allows Reflected XSS.This issue affects Tidy Up: from n/a through 1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00196 Published 2024-12-16 No fix listed CWE-352

TI-2011-03928 CVE-2011-4562 · GHSA-rcjr-w794-6fgv

Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and…

LOW 25

Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and (2) view/admin/log_item_details.php in the Redirection plugin 2.2.9 for WordPress allow remote attackers to inject arbitrary web scri…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02393 Published 2011-11-28 No fix listed CWE-79

TI-2008-00803 CVE-2008-0837 · GHSA-c5gp-8j7h-grf8

Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search…

LOW 24

Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search Unleashed 0.2.10 plugin for WordPress allows remote attackers to inject arbitrary web script or HTML via the s parameter, which is not…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02032 Published 2008-02-20 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Tidy Up Plugin <= 1.3 - CSRF to Reflected Cross-Site Scripting vulnerability

Multiple cross-site scripting (XSS) vulnerabilities in (1) view/admin/log_item.php and…

Cross-site scripting (XSS) vulnerability in the log feature in the John Godley Search…