Name Directory Project Name Directory
4 CVEs affecting Name Directory Project Name Directory. Latest disclosed: 2023-05-22. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-20652 | High | 8.8 | 2021-02-05 | Cross-site request forgery (CSRF) vulnerability in Name Directory 1.17.4 and earlier allows remote attackers to hijack the authentication of administrators via… |
CVE-2022-2072 | Medium | 6.1 | 2022-07-25 | The Name Directory WordPress plugin before 1.25.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-… |
CVE-2022-2071 | Medium | 6.1 | 2022-07-25 | The Name Directory WordPress plugin before 1.25.4 does not have CSRF check when importing names, and is also lacking sanitisation as well as escaping in some o… |
CVE-2023-22692 | Medium | 4.3 | 2023-05-22 | Cross-Site Request Forgery (CSRF) vulnerability in Jeroen Peters Name Directory plugin <= 1.27.1 versions. |