Insert Pages (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-01-16. Vendor: Unknown.

CVEs of Insert Pages

• CVE-2022-4483 - CVSS 5.4 (medium), 2023-01-16: The Insert Pages WordPress plugin before 3.7.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which…
• CVE-2021-24851 - CVSS 4.3 (medium), 2021-11-17: The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and metadata from arbitrary posts/pages…
• CVE-2021-24850 - CVSS 5.4 (medium), 2021-11-17: The Insert Pages WordPress plugin before 3.7.0 adds a shortcode that prints out other pages' content and custom fields. It can be used by users with a role as…