Wp Custom Cursors Project Wp Custom Cursors
4 CVEs affecting Wp Custom Cursors Project Wp Custom Cursors. Latest disclosed: 2023-06-19. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2221 | High | 7.2 | 2023-06-19 | The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL inject… |
CVE-2022-3150 | High | 7.2 | 2022-10-17 | The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement, leading to a SQL inject… |
CVE-2022-3149 | Medium | 6.1 | 2022-10-17 | The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow attackers to made a… |
CVE-2022-3151 | Medium | 4.3 | 2022-10-17 | The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to made a logged in ad… |