Insert Pages Project Insert Pages
4 CVEs affecting Insert Pages Project Insert Pages. Latest disclosed: 2023-01-16. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-18586 | Critical | 9.1 | 2019-08-22 | The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths. |
CVE-2022-4483 | Medium | 5.4 | 2023-01-16 | The Insert Pages WordPress plugin before 3.7.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which cou… |
CVE-2021-24850 | Medium | 5.4 | 2021-11-17 | The Insert Pages WordPress plugin before 3.7.0 adds a shortcode that prints out other pages' content and custom fields. It can be used by users with a role as… |
CVE-2021-24851 | Medium | 4.3 | 2021-11-17 | The Insert Pages WordPress plugin before 3.7.0 allows users with a role as low as Contributor to access content and metadata from arbitrary posts/pages regardl… |