Vulnerabilities

TI-2024-36511 CVE-2024-54425 · GHSA-mcw9-h88f-7f3f

WordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.com LionScripts: Site Maintenance & Noindex Nofollow Plugin maintenance-and-noindex-nofollow allows Stored XSS.This issue affects LionScripts: Site Maintenan…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00215 Published 2024-12-16 No fix listed CWE-352

TI-2024-20203 CVE-2024-30479 · GHSA-3ch4-xrp6-59fq

WordPress LionScripts: IP Blocker Lite plugin <= 11.1.1 - Bypass vulnerability

LOW 31

Authentication Bypass by Spoofing vulnerability in LionScripts IP Blocker Lite allows Functionality Bypass.This issue affects IP Blocker Lite: from n/a through 11.1.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00536 Published 2024-05-17 No fix listed CWE-290

TI-2023-24745 CVE-2023-46092 · GHSA-5fqg-7m43-98xr

WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com Webmaster Tools allows Stored XSS.This issue affects Webmaster Tools: from n/a through 2.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00236 Published 2023-11-13 No fix listed CWE-352

TI-2023-24746 CVE-2023-46093 · GHSA-4q7w-v4v6-fpg3

WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

LOW 26

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in LionScripts.Com Webmaster Tools plugin <= 2.0 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00362 Published 2023-10-27 No fix listed CWE-79

TI-2023-09780 CVE-2023-23993 · GHSA-48fj-24fp-5q3v

WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in LionScripts.Com LionScripts: IP Blocker Lite plugin <= 11.1.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00312 Published 2023-07-10 No fix listed CWE-352

Vulnerabilities

Filters

WordPress LionScripts: Site Maintenance plugin <= 2.1 - CSRF to Stored Cross-Site Scripting vulnerability

WordPress LionScripts: IP Blocker Lite plugin <= 11.1.1 - Bypass vulnerability

WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Webmaster Tools Plugin <= 2.0 is vulnerable to Cross Site Scripting (XSS)

WordPress IP Blocker Lite Plugin <= 11.1.1 is vulnerable to Cross Site Request Forgery (CSRF)