Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: chertz Clear all filters
TI-2024-09341 CVE-2024-10078 · GHSA-cgj8-gpqh-35qr

WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

Priority LOW 34

The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00411 Published 2024-10-18 No fix listed CWE-862
TI-2024-09342 CVE-2024-10079 · GHSA-28g6-x68x-c4p9

WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 42

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' func…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00809 Published 2024-10-18 No fix listed CWE-502
TI-2024-09343 CVE-2024-10080 · GHSA-38wc-25cg-5x9w

WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

Priority LOW 28

The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping on user supplied a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-10-18 No fix listed CWE-79
TI-2014-03205 CVE-2014-3933 · GHSA-7f4j-xr2p-4j8q

Cross-site scripting (XSS) vulnerability in the address components field formatter in the…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or H…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2014-06-02 No fix listed CWE-79