Popozure Pz-Linkcard
5 CVEs affecting Popozure Pz-Linkcard. Latest disclosed: 2024-03-28. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-0672 | High | 7.1 | 2024-03-28 | The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Sit… |
CVE-2023-47790 | High | 7.1 | 2023-11-23 | Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) vulnerability in Poporon Pz-LinkCard plugin <= 2.4.8 versions. |
CVE-2024-0673 | Medium | 6.1 | 2024-03-28 | The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perfo… |
CVE-2021-25012 | Medium | 6.1 | 2022-03-28 | The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading… |
CVE-2024-0677 | Medium | 5.1 | 2024-03-28 | The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege… |