Vulnerabilities

TI-2024-01292 CVE-2024-1385 · GHSA-78rg-c3vx-jc43

WP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update

LOW 31

The WP-Stateless – Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the dismiss_notices() function in all versions up to, and including, 3.4.0.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00406 Published 2024-04-06 No fix listed CWE-862

TI-2022-04496 CVE-2022-4905 · GHSA-9j2p-8qqf-h55c

UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting

LOW 28

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0066 Published 2023-02-13 Fixed in 3.2.0 CWE-79

Vulnerabilities

Filters

WP-Stateless – Google Cloud Storage <= 3.4.0 - Missing Authorization to Limited Arbitrary Options Update

UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting