Vulnerabilities

TI-2024-28808 CVE-2024-43137 · GHSA-238q-c368-qf6g

WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability

LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WappPress Team WappPress allows Stored XSS.This issue affects WappPress: from n/a through 6.0.4.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00274 Published 2024-08-12 No fix listed CWE-79

TI-2024-25992 CVE-2024-38758 · GHSA-638p-9h38-r62f

WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability

LOW 22

Server-Side Request Forgery (SSRF) vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 6.0.4.

CVSS 3.1MEDIUM 4.9 Network Low privileges No interaction EPSS 0.00222 Published 2024-07-20 No fix listed CWE-918

TI-2023-27219 CVE-2023-49815 · GHSA-x6cj-87h7-qqp7

WordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerability

MEDIUM 50

Unrestricted Upload of File with Dangerous Type vulnerability in WappPress Team WappPress.This issue affects WappPress: from n/a through 5.0.3.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.0063 Published 2024-03-27 No fix listed CWE-434

Vulnerabilities

Filters

WordPress WappPress Basic plugin <= 6.0.4 - Cross Site Scripting (XSS) vulnerability

WordPress WappPress plugin <= 6.0.4 - Blind Server Side Request Forgery (SSRF) vulnerability

WordPress WappPress plugin <= 5.0.3 - Unauthenticated Arbitrary File Upload vulnerability