Mch0lic Wp Finance
2 CVEs affecting Mch0lic Wp Finance. Latest disclosed: 2025-02-01. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13097 | Medium | 5.4 | 2025-02-01 | The WP Finance WordPress plugin through 1.3.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site… |
CVE-2024-13096 | Medium | 4.6 | 2025-02-01 | The WP Finance WordPress plugin through 1.3.6 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attac… |