Awin Awin Data Feed
2 CVEs affecting Awin Awin Data Feed. Latest disclosed: 2022-07-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-1937 | Medium | 6.1 | 2022-07-11 | The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a parameter before outputting it back via an AJAX action (available to both unauthe… |
CVE-2022-1938 | Medium | 5.4 | 2022-07-11 | The Awin Data Feed WordPress plugin before 1.8 does not sanitise and escape a header when processing request to generate analytics data, allowing unauthenticat… |