Vulnerabilities

TI-2021-13673 CVE-2021-34659 · GHSA-78q8-5843-6h3f

Plugmatter Pricing Table Lite <= 1.0.32 Reflected Cross-Site Scripting

LOW 29

The Plugmatter Pricing Table Lite WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the `email` parameter in the ~/license.php file which allows attackers to inject arbitrary web scripts, in versions u…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00895 Published 2021-08-16 No fix listed CWE-79

TI-2015-07828 CVE-2015-9451 · GHSA-wj93-qw5x-j5j5

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL…

MEDIUM 47

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_mailchimp pmfb_tid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0237 Published 2019-10-07 No fix listed CWE-89

TI-2015-07827 CVE-2015-9450 · GHSA-f6rw-6rq2-wmm7

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL…

MEDIUM 46

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL injection via the wp-admin/admin-ajax.php?action=pmfb_cc pmfb_tid parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02183 Published 2019-10-07 No fix listed CWE-89

Vulnerabilities

Filters

Plugmatter Pricing Table Lite <= 1.0.32 Reflected Cross-Site Scripting

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL…

The plugmatter-optin-feature-box-lite plugin before 2.0.14 for WordPress has SQL…