Webmaster-source - vulnerabilities (CVEs)

4 CVEs in 2 products, 0 in the last 30 days, newest from 2022-01-24.

Products

• Gocodes - 2 CVEs
• Wp125 - 2 CVEs

Newest CVEs of Webmaster-source

• CVE-2021-25073 - CVSS 8.8 (high), 2022-01-24: The WP125 WordPress plugin before 1.5.5 does not have CSRF checks in various action, for example when deleting an ad, allowing attackers to make a logged in…
• CVE-2015-9398 - CVSS 8.8 (high), 2019-09-20: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php gcid SQL injection.
• CVE-2015-9397 - CVSS 5.4 (medium), 2019-09-20: The gocodes plugin through 1.3.5 for WordPress has wp-admin/tools.php deletegc XSS.
• CVE-2013-2700 - CVSS 6.8 (medium), 2014-05-14: Cross-site request forgery (CSRF) vulnerability in the Add/Edit page (adminmenus.php) in the WP125 plugin before 1.5.0 for WordPress allows remote attackers…