Bravenewcode - vulnerabilities (CVEs)

4 CVEs in 1 products, 0 in the last 30 days, newest from 2023-01-09.

Products

• Wptouch - 4 CVEs

Newest CVEs of Bravenewcode

• CVE-2022-3417 - CVSS 8.8 (high), 2023-01-09: The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an…
• CVE-2022-3416 - CVSS 7.2 (high), 2023-01-09: The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary…
• CVE-2011-4803 - CVSS 7.5 (high), 2011-12-14: SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id…
• CVE-2010-4779 - CVSS 4.3 (medium), 2011-04-07: Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to…