Themify Portfolio Post (Unknown) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2023-02-13. Vendor: Unknown.

CVEs of Themify Portfolio Post

• CVE-2023-0362 - CVSS 5.4 (medium), 2023-02-13: Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post…
• CVE-2022-4464 - CVSS 5.4 (medium), 2023-01-16: Themify Portfolio Post WordPress plugin before 1.2.1 does not validate and escapes some of its shortcode attributes before outputting them back in the page,…
• CVE-2022-0200 - CVSS 5.4 (medium), 2022-02-14: Themify Portfolio Post WordPress plugin before 1.1.7 does not sanitise and escape the num_of_pages parameter before outputting it back the response of the…
• CVE-2021-24129 - CVSS 5.4 (medium), 2021-03-18: Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS)…