Vulnerabilities

TI-2024-08560 CVE-2024-9224 · GHSA-w8x6-88rf-9hhp

Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read

LOW 32

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.0146 Published 2024-10-01 No fix listed CWE-22

TI-2023-23965 CVE-2023-44471 · GHSA-63pm-jq6g-9pcw

WordPress Backend Localization Plugin <= 2.1.10 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Bernhard Kau Backend Localization plugin <= 2.1.10 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2023-10-10 No fix listed CWE-352

TI-2012-05437 CVE-2012-10014 · GHSA-cgg5-8gwc-3f9x

Kau-Boy Backend Localization Plugin backend_localization.php localize_backend cross site scripting

LOW 28

A vulnerability classified as problematic has been found in Kau-Boy Backend Localization Plugin 2.0 on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00559 Published 2023-04-24 No fix listed CWE-79

TI-2012-05436 CVE-2012-10013 · GHSA-8m5p-37vm-f6cv

Kau-Boy Backend Localization Plugin backend_localization.php cross site scripting