Zitscher Simple Photoswipe
2 CVEs affecting Zitscher Simple Photoswipe. Latest disclosed: 2024-06-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-5570 | Medium | 6.5 | 2024-06-28 | The Simple Photoswipe WordPress plugin through 0.1 does not have authorisation check when updating its settings, which could allow any authenticated users, suc… |
CVE-2024-5473 | Medium | 4.0 | 2024-06-26 | The Simple Photoswipe WordPress plugin through 0.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to p… |