Vulnerabilities

TI-2024-25957 CVE-2024-38723 · GHSA-qq4x-r2pp-5qfw

WordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability

LOW 28

Server-Side Request Forgery (SSRF) vulnerability in Bernhard Kux JSON Content Importer.This issue affects JSON Content Importer: from n/a through 1.5.6.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0025 Published 2024-07-22 No fix listed CWE-918

TI-2023-05756 CVE-2023-6268 · GHSA-p367-m3vv-728q

JSON Content Importer < 1.5.4 - Reflected XSS

LOW 28

The JSON Content Importer WordPress plugin before 1.5.4 does not sanitise and escape the tab parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high p…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0042 Published 2023-12-26 Fixed in 1.5.4 CWE-79

TI-2023-10795 CVE-2023-25485 · GHSA-rv59-78h6-2m84

WordPress JSON Content Importer Plugin <= 1.3.15 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Bernhard Kux JSON Content Importer plugin <= 1.3.15 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-04-25 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Get Use APIs – JSON Content Importer plugin <= 1.5.6 - Server Side Request Forgery (SSRF) vulnerability

JSON Content Importer < 1.5.4 - Reflected XSS

WordPress JSON Content Importer Plugin <= 1.3.15 is vulnerable to Cross Site Scripting (XSS)