Tri
1 CVEs across 4 Tri products. Browse Tri vulnerabilities, severities, and proof-of-concept exploits.
Tri products with known CVEs
Tri CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-1295 | Medium | 6.5 | 2024-06-14 | The events-calendar-pro WordPress plugin before 6.4.0.1, The Events Calendar WordPress plugin before 6.4.0.1 does not prevent users with at least the contribut… |
CVE-2023-7233 | Medium | 4.8 | 2024-02-12 | The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2023-0381 | High | 8.8 | 2023-02-27 | The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could al… |
CVE-2022-4759 | Medium | 5.4 | 2023-02-13 | The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |
CVE-2020-36626 | Medium | 5.5 | 2022-12-27 | A vulnerability classified as critical has been found in Modern Tribe Panel Builder Plugin. Affected is the function add_post_content_filtered_to_search_sql of… |
CVE-2021-25028 | Medium | 6.1 | 2022-01-24 | The Event Tickets WordPress plugin before 5.2.2 does not validate the tribe_tickets_redirect_to parameter before redirecting the user to the given value, leadi… |
CVE-2015-9354 | Medium | 4.8 | 2019-08-28 | The gigpress plugin before 2.3.11 for WordPress has XSS. |
CVE-2015-9353 | High | 7.2 | 2019-08-28 | The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066. |
CVE-2015-4066 | | | 2015-05-27 | Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbi… |