Riverforest-Wp Simple Blog Card
2 CVEs affecting Riverforest-Wp Simple Blog Card. Latest disclosed: 2023-08-30. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-4035 | Medium | 5.4 | 2023-08-30 | The Simple Blog Card WordPress plugin before 1.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wher… |
CVE-2023-4036 | Medium | 4.3 | 2023-08-30 | The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such… |