Simple Quotation (Unknown) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2022-03-14. Vendor: Unknown.

CVEs of Simple Quotation

• CVE-2022-22735 - CVSS 8.8 (high), 2022-03-14: The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of…
• CVE-2022-22734 - CVSS 6.1 (medium), 2022-03-14: The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes. As a…