Awplife Weather Effect
2 CVEs affecting Awplife Weather Effect. Latest disclosed: 2021-10-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-24683 | Medium | 5.4 | 2021-10-11 | The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which cou… |
CVE-2021-24709 | Medium | 4.8 | 2021-10-11 | The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which co… |