Vulnerabilities

TI-2024-31630 CVE-2024-47312 · GHSA-hrxv-p9g2-4f7m

WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WP Grim Classic Editor and Classic Widgets classic-editor-and-classic-widgets allows SQL Injection.This issue affects…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00419 Published 2024-10-17 No fix listed CWE-89

TI-2023-11651 CVE-2023-26514 · GHSA-fpmx-qfph-4r6r

WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Dynamic XML Sitemaps Generator for Google plugin <= 1.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00301 Published 2023-11-12 No fix listed CWE-352

TI-2023-12166 CVE-2023-27434 · GHSA-72vx-6xj8-m752

WordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WPGrim Classic Editor and Classic Widgets plugin <= 1.2.5 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-12 No fix listed CWE-352

Vulnerabilities

Filters

WordPress Classic Editor and Classic Widgets plugin <= 1.4.1 - SQL Injection vulnerability

WordPress XML Sitemap Generator for Google Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

WordPress Classic Editor and Classic Widgets Plugin <= 1.2.5 is vulnerable to Cross Site Request Forgery (CSRF)