Pluginbuilders
11 CVEs across 2 Pluginbuilders products. Browse Pluginbuilders vulnerabilities, severities, and proof-of-concept exploits.
Pluginbuilders products with known CVEs
Pluginbuilders CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2022-4954 | Medium | 5.5 | 2023-10-20 | The Waiting: One-click countdowns plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Countdown name in versions up to, and including, 0… |
CVE-2023-4000 | Medium | 6.3 | 2023-08-31 | The Waiting: One-click countdowns plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 0.6.2. This is due to miss… |
CVE-2023-3999 | Medium | 6.3 | 2023-08-31 | The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to missing capability checks on its AJAX calls in versions up… |
CVE-2023-2757 | High | 7.4 | 2023-05-18 | The Waiting: One-click countdowns plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on 'saveLang' functions in versi… |
CVE-2023-1871 | Medium | 5.4 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n… |
CVE-2023-1870 | Medium | 4.3 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n… |
CVE-2023-1869 | Medium | 5.5 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 1.2.5 due to insufficie… |
CVE-2023-1868 | Medium | 6.5 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when clearing the plugin cache via the yrc_cl… |
CVE-2023-1867 | Medium | 5.4 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n… |
CVE-2023-1866 | Medium | 5.4 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.4. This is due to missing or incorrect n… |
CVE-2023-1865 | Medium | 6.5 | 2023-04-05 | The YourChannel plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check when resetting plugin settings via the yrc_n… |