Gwolle Guestbook Project Gwolle Guestbook
4 CVEs affecting Gwolle Guestbook Project Gwolle Guestbook. Latest disclosed: 2022-06-23. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-8351 | Critical | 9.0 | 2017-09-11 | PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticat… |
CVE-2021-24980 | Medium | 6.1 | 2021-12-27 | The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, l… |
CVE-2018-17884 | Medium | 6.1 | 2018-10-02 | XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php |
CVE-2017-20089 | Low | 3.5 | 2022-06-23 | A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation lead… |