Carlos Doral Mantenimiento Web (WordPress Plugin)
2 CVEs affecting Carlos Doral Mantenimiento Web (WordPress Plugin). Latest disclosed: 2022-11-18. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-38075 | Medium | 6.1 | 2022-11-18 | Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin <= 0.13 on WordPress. |
CVE-2022-41980 | Medium | 4.8 | 2022-11-08 | Auth. (admin+) Cross-Site Scripting (XSS) vulnerability in Mantenimiento web plugin <= 0.13 on WordPress. |