Plugin Oficial (Unknown) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2025-05-15. Vendor: Unknown.

CVEs of Plugin Oficial

• CVE-2025-1303 - CVSS 6.1 (medium), 2025-05-15: The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected…
• CVE-2025-1289 - CVSS 4.8 (medium), 2025-05-15: The Plugin Oficial WordPress plugin through 1.7.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to…