Riverside HTTP Headers
4 CVEs affecting Riverside HTTP Headers. Latest disclosed: 2023-11-13. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-1208 | High | 7.2 | 2023-07-10 | This HTTP Headers WordPress plugin before 1.18.11 allows arbitrary data to be written to arbitrary files, leading to a Remote Code Execution vulnerability. |
CVE-2023-1207 | High | 7.2 | 2023-05-15 | This HTTP Headers WordPress plugin before 1.18.8 has an import functionality which executes arbitrary SQL on the server, leading to an SQL Injection vulnerabil… |
CVE-2023-37874 | Medium | 5.9 | 2023-08-05 | Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dimitar Ivanov HTTP Headers plugin <= 1.18.11 versions. |
CVE-2023-37978 | Medium | 4.4 | 2023-11-13 | Server-Side Request Forgery (SSRF) vulnerability in Dimitar Ivanov HTTP Headers.This issue affects HTTP Headers: from n/a through 1.18.11. |