Scribit - vulnerabilities (CVEs)

5 CVEs in 3 products, 0 in the last 30 days, newest from 2025-01-17.

Products

• Proofreading - 2 CVEs
• Shortcodes Finder - 2 CVEs
• Gdpr Compliance - 1 CVEs

Newest CVEs of Scribit

• CVE-2024-12466 - CVSS 6.1 (medium), 2025-01-17: The Proofreading plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'nonce' parameter in all versions up to, and including, 1.2.1.1…
• CVE-2024-34388 - CVSS 7.5 (high), 2024-05-06: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Scribit GDPR Compliance.This issue affects GDPR Compliance: from n/a through 1.2.5.
• CVE-2024-21750 - CVSS 7.1 (high), 2024-02-01: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Scribit Shortcodes Finder allows Reflected XSS.This…
• CVE-2023-47695 - CVSS 7.1 (high), 2023-11-13: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Shortcodes Finder plugin <= 1.5.3 versions.
• CVE-2023-45772 - CVSS 7.1 (high), 2023-10-25: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Scribit Proofreading plugin <= 1.0.11 versions.