Simple Posts Ticker (Unknown) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-10-16. Vendor: Unknown.

CVEs of Simple Posts Ticker

• CVE-2023-4725 - CVSS 4.8 (medium), 2023-10-16: The Simple Posts Ticker WordPress plugin before 1.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin…
• CVE-2023-4646 - CVSS 5.4 (medium), 2023-10-16: The Simple Posts Ticker WordPress plugin before 1.1.6 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…