Dev4press
7 CVEs across 7 Dev4press products. Browse Dev4press vulnerabilities, severities, and proof-of-concept exploits.
Dev4press products with known CVEs
Dev4press CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-42639 | Critical | 9.3 | 2026-06-15 | Unauthenticated SQL Injection in GD Rating System <= 3.6.2 versions. |
CVE-2024-0852 | High | 8.8 | 2025-05-15 | The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing… |
CVE-2024-0868 | Medium | 5.3 | 2024-04-17 | The coreActivity: Activity Logging plugin for WordPress plugin before 2.1 retrieved IP addresses of requests via headers such X-FORWARDED to log them, allowing… |
CVE-2024-25093 | High | 7.1 | 2024-02-29 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Milan Petrovic GD Rating System allows Stored XSS.This is… |
CVE-2023-46821 | High | 7.6 | 2023-11-06 | Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth. (admin+)… |
CVE-2023-40330 | High | 7.1 | 2023-09-27 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Milan Petrovic GD Security Headers plugin <= 1.6.1 versions. |
CVE-2023-3122 | High | 7.2 | 2023-07-12 | The GD Mail Queue plugin for WordPress is vulnerable to Stored Cross-Site Scripting via email contents in versions up to, and including, 3.9.3 due to insuffici… |
CVE-2022-45816 | Medium | 4.8 | 2022-12-06 | Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress. |
CVE-2017-18591 | Medium | 6.1 | 2019-08-27 | The gd-rating-system plugin before 2.1 for WordPress has XSS in log.php. |
CVE-2015-5482 | | | 2015-08-18 | Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary l… |
CVE-2015-5481 | | | 2015-08-18 | Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject ar… |
CVE-2014-2839 | | | 2015-01-12 | SQL injection vulnerability in the GD Star Rating plugin 19.22 for WordPress allows remote administrators to execute arbitrary SQL commands via the s parameter… |
CVE-2014-2838 | | | 2015-01-12 | Multiple cross-site request forgery (CSRF) vulnerabilities in the GD Star Rating plugin 19.22 for WordPress allow remote attackers to hijack the authentication… |