Granthweb

Go Pricing

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2023-2500

  • EPSS 0.77%
  • Veröffentlicht 25.05.2023 00:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:44

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.3.19 via deserialization of untrusted input from the 'go_pricing' shortcode 'data' parameter. This all...

8.8

CVE-2023-2494

  • EPSS 0.13%
  • Veröffentlicht 24.05.2023 00:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:43

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'process_postdata' function in versions up to, and including, 3.3.19. This makes it ...

7.5

CVE-2023-2496

  • EPSS 3.07%
  • Veröffentlicht 24.05.2023 00:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:43

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to unauthorized arbitrary file uploads due to an improper capability check on the 'validate_upload' function in versions up to, and including, 3.3.19. This makes ...

5.4

CVE-2023-2498

  • EPSS 0.14%
  • Veröffentlicht 24.05.2023 00:15:09
  • Zuletzt bearbeitet 21.11.2024 07:58:43

The Go Pricing - WordPress Responsive Pricing Tables plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.19 due to insufficient input sanitization and output escaping. This makes it p...