Wpvar Wp Shamsi
3 CVEs affecting Wpvar Wp Shamsi. Latest disclosed: 2023-03-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0335 | Medium | 6.5 | 2023-03-27 | The WP Shamsi WordPress plugin through 4.3.3 has CSRF and broken access control vulnerabilities which leads user with role as low as subscriber delete attachme… |
CVE-2022-4555 | Medium | 6.5 | 2022-12-16 | The WP Shamsi plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the deactivate() function hooked via init() in ve… |
CVE-2022-38058 | Medium | 4.3 | 2022-09-09 | Authenticated (subscriber+) Plugin Setting change vulnerability in WP Shamsi plugin <= 4.1.1 at WordPress. |