Danielpowney

6 CVEs across 2 Danielpowney products. Browse Danielpowney vulnerabilities, severities, and proof-of-concept exploits.

Danielpowney products with known CVEs

ProductCVEs
Multi Rating4
Badgearoo2
Danielpowney CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-1033Medium4.82025-05-15The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfor…
CVE-2024-13828Medium6.12025-05-15The Badgearoo WordPress plugin through 1.0.14 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site…
CVE-2023-32125Medium4.32023-11-09Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVE-2023-32130Medium5.92023-08-18Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.6 versions.
CVE-2022-47433High7.12023-03-29Unauth. Reflected Cross-Site Scripting vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.
CVE-2022-47443Medium4.32023-03-14Cross-Site Request Forgery (CSRF) vulnerability in Daniel Powney Multi Rating plugin <= 5.0.5 versions.