Vulnerabilities

TI-2023-04567 CVE-2023-4962 · GHSA-2227-26ff-8f7g

Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user sup…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00436 Published 2024-01-11 No fix listed CWE-79

TI-2007-06457 CVE-2007-10003 · GHSA-24m5-fqmm-mrmv

The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection

LOW 39

A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2023-10-29 No fix listed CWE-89

TI-2005-04625 CVE-2005-10002 · GHSA-8v2m-x872-56fc

almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

MEDIUM 44

A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00945 Published 2023-10-29 No fix listed CWE-22

TI-2013-02354 CVE-2013-2693 · GHSA-q39q-h3pm-87mq

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin s…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01081 Published 2014-04-10 No fix listed CWE-352

Vulnerabilities

Filters

Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection

almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin…