Wp-Experts
5 CVEs across 4 Wp-Experts products. Browse Wp-Experts vulnerabilities, severities, and proof-of-concept exploits.
Wp-Experts products with known CVEs
Wp-Experts CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2023-31220 | High | 7.1 | 2023-09-04 | Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WP-EXPERTS.IN TEAM WP Categories Widget plugin <= 2.2 versions. |
CVE-2023-3139 | Medium | 6.1 | 2023-07-04 | The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered. |
CVE-2022-1717 | Medium | 4.8 | 2022-06-20 | The Custom Share Buttons with Floating Sidebar WordPress plugin before 4.2 does not sanitise and escape some of its settings, which could allow high privilege… |
CVE-2022-0874 | Medium | 4.8 | 2022-05-09 | The WP Social Buttons WordPress plugin through 2.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site… |
CVE-2021-24906 | High | 7.5 | 2022-01-24 | The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users… |