Vulnerabilities

TI-2023-26198 CVE-2023-48335 · GHSA-866j-r488-7572

WordPress Hide login page plugin <= 1.1.9 - Secret Login Page Location Disclosure on Multisites vulnerability

LOW 17

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Webcraftic Hide login page allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Hide login page: from n/a through…

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00303 Published 2024-06-04 No fix listed CWE-200

TI-2019-12263 CVE-2019-16289 · GHSA-56v5-5hhr-c693

The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows…

LOW 26

The insert-php (aka Woody ad snippets) plugin before 2.2.8 for WordPress allows authenticated XSS via the winp_item parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01028 Published 2019-09-13 No fix listed CWE-79

TI-2019-11919 CVE-2019-15858 · GHSA-q88p-g94x-r7pc

admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5…

MEDIUM 57

admin/includes/class.import.snippet.php in the "Woody ad snippets" plugin before 2.2.5 for WordPress allows unauthenticated options import, as demonstrated by storing an XSS payload for remote code execution.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.19967 Published 2019-09-03 No fix listed CWE-306

TI-2019-11885 CVE-2019-15818 · GHSA-f7jw-44w3-2924

The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no…

LOW 30

The simple-301-redirects-addon-bulk-uploader plugin through 1.2.4 for WordPress has no requirement for authentication for action=bulk301export or action=bulk301clearlist.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01467 Published 2019-08-30 No fix listed CWE-601

TI-2019-11847 CVE-2019-15776 · GHSA-vvxg-35hg-r5hr

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no…

LOW 30

The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01344 Published 2019-08-29 No fix listed CWE-601

TI-2019-10983 CVE-2019-14773 · GHSA-fjqg-gqf9-43m4

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5…

LOW 36

admin/includes/class.actions.snippet.php in the "Woody ad snippets" plugin through 2.2.5 for WordPress allows wp-admin/admin-post.php?action=close&post= deletion.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.0163 Published 2019-08-08 No fix listed