Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: nsp-code Clear all filters
TI-2024-10734 CVE-2024-11585 · GHSA-rw24-2p7p-f5c2

WP Hide & Security Enhancer <= 2.5.1 - Missing Authorization to Unauthenticated Arbitrary File Contents Deletion

Priority MEDIUM 40

The WP Hide & Security Enhancer plugin for WordPress is vulnerable to arbitrary file contents deletion due to a missing authorization and insufficient file path validation in the file-process.php in all versions up to, a…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0061 Published 2024-12-06 No fix listed CWE-22
TI-2022-02345 CVE-2022-2538 · GHSA-4mf2-h833-wrvr

WP Hide & Security Enhancer < 1.8 - Reflected Cross-Site Scripting

Priority LOW 28

The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00681 Published 2022-08-29 Fixed in 1.8 CWE-79