Pluginbuilders - vulnerabilities (CVEs)
11 CVEs in 2 products, 0 in the last 30 days, newest from 2023-10-20.
Products
Newest CVEs of Pluginbuilders
- CVE-2022-4954 - CVSS 5.5 (medium), 2023-10-20: The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including,…
- CVE-2023-4000 - CVSS 6.3 (medium), 2023-08-31: The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to…
- CVE-2023-3999 - CVSS 6.3 (medium), 2023-08-31: The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up…
- CVE-2023-2757 - CVSS 7.4 (high), 2023-05-18: The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in…
- CVE-2023-1867 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1870 - CVSS 4.3 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1866 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
- CVE-2023-1869 - CVSS 5.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to…
- CVE-2023-1865 - CVSS 6.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the…
- CVE-2023-1868 - CVSS 6.5 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the…
- CVE-2023-1871 - CVSS 5.4 (medium), 2023-04-05: The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect…
