Vulnerabilities

TI-2024-12268 CVE-2024-13223 · GHSA-64wx-c7jg-27vx

Tabulate <= 2.10.3 - Reflected XSS

MEDIUM 60

The Tabulate WordPress plugin through 2.10.3 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege us…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00325 Published 2025-01-31 No fix listed CWE-79

TI-2024-34558 CVE-2024-51644 · GHSA-7259-cwhj-xf2j

WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in samwilson Addressbook addressbook allows Stored XSS.This issue affects Addressbook: from n/a through <= 1.1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00227 Published 2024-11-19 No fix listed CWE-352

TI-2015-08057 CVE-2015-10129 · GHSA-4hrc-358r-qjm4

planet-freo auth.inc.php comparison

LOW 33

A vulnerability was found in planet-freo up to 20150116 and classified as problematic.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00621 Published 2024-02-04 No fix listed CWE-697

Vulnerabilities

Filters

Tabulate <= 2.10.3 - Reflected XSS

WordPress Addressbook plugin <= 1.1.3 - CSRF to Stored XSS vulnerability

planet-freo auth.inc.php comparison