Vruiz Vr-Frases
3 CVEs affecting Vruiz Vr-Frases. Latest disclosed: 2025-02-17. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13626 | High | 7.1 | 2025-02-17 | The VR-Frases (collect & share quotes) WordPress plugin through 3.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading t… |
CVE-2025-0860 | Medium | 6.1 | 2025-01-30 | The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via several parameters in all versions up to, and i… |
CVE-2025-0861 | Medium | 4.9 | 2025-01-30 | The VR-Frases (collect & share quotes) plugin for WordPress is vulnerable to SQL Injection via several parameters in all versions up to, and including, 3.0.1 d… |