Wpcode - vulnerabilities (CVEs)

3 CVEs in 1 products, 0 in the last 30 days, newest from 2023-08-07.

Products

• Wpcode - 3 CVEs

Newest CVEs of Wpcode

• CVE-2023-3524 - CVSS 6.1 (medium), 2023-08-07: The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
• CVE-2023-1624 - CVSS 6.5 (medium), 2023-04-24: The WPCode WordPress plugin before 2.0.9 has a flawed CSRF when deleting log, and does not ensure that the file to be deleted is inside the expected folder.…
• CVE-2023-0328 - CVSS 4.3 (medium), 2023-03-06: The WPCode WordPress plugin before 2.0.7 does not have adequate privilege checks in place for several AJAX actions, only checking the nonce. This may lead to…