Bravenewcode Wptouch
4 CVEs affecting Bravenewcode Wptouch. Latest disclosed: 2023-01-09. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-3417 | High | 8.8 | 2023-01-09 | The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user… |
CVE-2022-3416 | High | 7.2 | 2023-01-09 | The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary fi… |
CVE-2011-4803 | | 2011-12-14 | SQL injection vulnerability in wptouch/ajax.php in the WPTouch plugin for WordPress allows remote attackers to execute arbitrary SQL commands via the id parame… | |
CVE-2010-4779 | | 2011-04-07 | Cross-site scripting (XSS) vulnerability in lib/includes/auth.inc.php in the WPtouch plugin 1.9.19.4 and 1.9.20 for WordPress allows remote attackers to inject… |