Gigpress (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2024-02-12. Vendor: Unknown.

CVEs of Gigpress

• CVE-2023-7233 - CVSS 4.8 (medium), 2024-02-12: The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…
• CVE-2023-0381 - CVSS 8.8 (high), 2023-02-27: The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could…
• CVE-2022-4759 - CVSS 6.8 (medium), 2023-02-13: The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the…