Postieplugin Postie
3 CVEs affecting Postieplugin Postie. Latest disclosed: 2020-01-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-20204 | Medium | 5.4 | 2020-01-02 | The Postie plugin 1.9.40 for WordPress allows XSS, as demonstrated by a certain payload with jaVasCript:/* at the beginning and a crafted SVG element. |
CVE-2019-20203 | Medium | 5.3 | 2020-01-02 | The Authorized Addresses feature in the Postie plugin 1.9.40 for WordPress allows remote attackers to publish posts by spoofing the From information of an emai… |
CVE-2012-2580 | | 2014-06-20 | Cross-site scripting (XSS) vulnerability in the Postie plugin 1.4.3, and possibly before 1.5.15, for WordPress allows remote attackers to inject arbitrary web… |