Custom4web - vulnerabilities (CVEs)

2 CVEs in 2 products, 0 in the last 30 days, newest from 2023-05-10.

Products

• Affiliate Links Lite - 1 CVEs
• Wp Open Graph - 1 CVEs

Newest CVEs of Custom4web

• CVE-2023-22696 - CVSS 6.5 (medium), 2023-05-10: Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Custom4Web Affiliate Links Lite plugin <= 2.5 versions.
• CVE-2019-5960 - CVSS 8.8 (high), 2019-07-05: Cross-site request forgery (CSRF) vulnerability in WP Open Graph 1.6.1 and earlier allows remote attackers to hijack the authentication of administrators via…