Tipsandtricks-Hq Wp Video Lightbox
3 CVEs affecting Tipsandtricks-Hq Wp Video Lightbox. Latest disclosed: 2023-01-16. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2189 | Medium | 6.1 | 2022-07-25 | The WP Video Lightbox WordPress plugin before 1.9.5 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which coul… |
CVE-2022-4465 | Medium | 5.4 | 2023-01-16 | The WP Video Lightbox WordPress plugin before 1.9.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, whic… |
CVE-2021-24665 | Medium | 5.4 | 2021-08-30 | The WP Video Lightbox WordPress plugin before 1.9.3 does not escape the attributes of its shortcodes, allowing users with a role as low as contributor to perfo… |