Salephpscripts
4 CVEs across 1 Salephpscripts products. Browse Salephpscripts vulnerabilities, severities, and proof-of-concept exploits.
Salephpscripts products with known CVEs
Salephpscripts CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-3673 | Critical | 9.1 | 2024-08-30 | The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion is… |
CVE-2024-3669 | Medium | 6.8 | 2024-07-30 | The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cro… |
CVE-2024-3552 | Critical | 9.8 | 2024-06-13 | The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available t… |
CVE-2023-2201 | High | 8.8 | 2023-06-02 | The Web Directory Free for WordPress is vulnerable to SQL Injection via the ‘post_id’ parameter in versions up to, and including, 1.6.8 due to insufficient es… |