Wpinventory Wp Inventory Manager
4 CVEs affecting Wpinventory Wp Inventory Manager. Latest disclosed: 2023-11-09. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2842 | High | 8.1 | 2023-06-27 | The WP Inventory Manager WordPress plugin before 2.1.0.14 does not have CSRF checks, which could allow attackers to make logged-in admins delete Inventory Item… |
CVE-2023-2123 | Medium | 6.1 | 2023-08-16 | The WP Inventory Manager WordPress plugin before 2.1.0.13 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflecte… |
CVE-2023-1806 | Medium | 6.1 | 2023-05-08 | The WP Inventory Manager WordPress plugin before 2.1.0.12 does not sanitise and escape the message parameter before outputting it back in the page, leading to… |
CVE-2023-34002 | Medium | 5.4 | 2023-11-09 | Cross-Site Request Forgery (CSRF) vulnerability in WP Inventory Manager plugin <= 2.1.0.13 versions. |