Devnath Verma Widget Bundle
3 CVEs affecting Devnath Verma Widget Bundle. Latest disclosed: 2024-06-21. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-4616 | Medium | 6.1 | 2024-06-21 | The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-S… |
CVE-2024-4970 | Medium | 4.8 | 2024-06-21 | The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to per… |
CVE-2024-4969 | Medium | 4.3 | 2024-06-21 | The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attackers to make logged in admin enable/dis… |