Verbb Knock_knock
2 CVEs affecting Verbb Knock_knock. Latest disclosed: 2020-05-25. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-13485 | Critical | 9.1 | 2020-05-25 | The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header. |
CVE-2020-13486 | Medium | 6.1 | 2020-05-25 | The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection. |