Vulnerabilities

TI-2024-12485 CVE-2024-13444 · GHSA-mvwv-8vjm-2v48

wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

LOW 27

The wp-greet plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00207 Published 2025-01-21 No fix listed CWE-352

TI-2024-32240 CVE-2024-48038 · GHSA-7rg4-m9mf-m8jc

WordPress wp-Monalisa plugin <= 6.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in tuxlog wp-Monalisa wp-monalisa.This issue affects wp-Monalisa: from n/a through <= 6.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00172 Published 2024-10-17 No fix listed CWE-352

TI-2024-20155 CVE-2024-30429 · GHSA-x75q-8m6m-8c94

WordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Hans Matzen allows Stored XSS.This issue affects wp-forecast: from n/a through 9.2.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00348 Published 2024-03-29 No fix listed CWE-79

Vulnerabilities

Filters

wp-greet <= 6.2 - Cross-Site Request Forgery to Stored Cross-Site Scripting

WordPress wp-Monalisa plugin <= 6.4 - Cross Site Request Forgery (CSRF) vulnerability

WordPress wp-forecast plugin <= 9.2 - Cross Site Scripting (XSS) vulnerability