Azindex Wordpress Plugin - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2024-09-09.

Products

• Azindex Wordpress Plugin - 2 CVEs

Newest CVEs of Azindex Wordpress Plugin

• CVE-2024-7688 - CVSS 6.5 (medium), 2024-09-09: The AZIndex WordPress plugin through 0.8.1 does not have CSRF checks in some places, which could allow attackers to make logged in admin delete arbitrary…
• CVE-2024-7687 - CVSS 6.1 (medium), 2024-09-09: The AZIndex WordPress plugin through 0.8.1 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow…