Tri Gigpress
6 CVEs affecting Tri Gigpress. Latest disclosed: 2024-02-12. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0381 | High | 8.8 | 2023-02-27 | The GigPress WordPress plugin through 2.3.28 does not validate and escape some of its shortcode attributes before using them in SQL statement/s, which could al… |
CVE-2015-9353 | High | 7.2 | 2019-08-28 | The gigpress plugin before 2.3.11 for WordPress has SQL injection in the admin area, a different vulnerability than CVE-2015-4066. |
CVE-2022-4759 | Medium | 5.4 | 2023-02-13 | The GigPress WordPress plugin before 2.3.28 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the… |
CVE-2023-7233 | Medium | 4.8 | 2024-02-12 | The GigPress WordPress plugin through 2.3.29 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform… |
CVE-2015-9354 | Medium | 4.8 | 2019-08-28 | The gigpress plugin before 2.3.11 for WordPress has XSS. |
CVE-2015-4066 | | 2015-05-27 | Multiple SQL injection vulnerabilities in admin/handlers.php in the GigPress plugin before 2.3.9 for WordPress allow remote authenticated users to execute arbi… |