Vulnerabilities

TI-2025-22183 CVE-2025-30913 · GHSA-jj64-9xrj-3w59

WordPress Access Areas Plugin <= 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in podpirate Access Areas wp-access-areas allows Reflected XSS.This issue affects Access Areas: from n/a through <= 1.5.1…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00393 Published 2025-04-01 No fix listed CWE-79

TI-2023-06656 CVE-2023-7286 · GHSA-cv73-2ppw-f3p9

ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference

LOW 29

The plugin ACF Quick Edit Fields for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including, 3.2.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00426 Published 2024-10-16 No fix listed CWE-639

Vulnerabilities

Filters

WordPress Access Areas Plugin <= 1.5.19 - Reflected Cross Site Scripting (XSS) vulnerability

ACF Quick Edit Fields <= 3.2.2 - Authenticated (Contributor+) Insecure Direct Object Reference