Vulnerabilities

TI-2023-25806 CVE-2023-47667 · GHSA-qvgw-89m2-hwcj

WordPress WP Full Stripe Free plugin <= 7.0.16 - Cross Site Request Forgery (CSRF) vulnerability on every Setting Save

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Mammothology WP Full Stripe Free.This issue affects WP Full Stripe Free: from n/a through 7.0.16.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00294 Published 2023-11-18 No fix listed CWE-352

TI-2023-24741 CVE-2023-46088 · GHSA-v539-jjjq-mv6h

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-10-26 No fix listed CWE-79

TI-2023-13411 CVE-2023-28934 · GHSA-grfr-m5q4-64q8

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Mammothology WP Full Stripe Free plugin <= 1.6.1 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-08 No fix listed CWE-79