Securimage-Wp-Fixed Project Securimage-Wp-Fixed
2 CVEs affecting Securimage-Wp-Fixed Project Securimage-Wp-Fixed. Latest disclosed: 2023-07-11. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34640 | Medium | 6.1 | 2021-08-11 | The Securimage-WP-Fixed WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of $_SERVER['PHP_SELF'] in the ~/securimage-wp.php file… |
CVE-2023-35044 | Medium | 4.3 | 2023-07-11 | Cross-Site Request Forgery (CSRF) vulnerability in Drew Phillips Securimage-WP plugin <= 3.6.16 versions. |