Videousermanuals

White Label Cms

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
4.4

CVE-2026-11898

  • EPSS 0.25%
  • Veröffentlicht 11.07.2026 05:35:45
  • Zuletzt bearbeitet 15.07.2026 14:17:17

The White Label CMS plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 2.7.12 due to insufficient input sanitization and output escaping. This makes it possible for authenticated...

5.3

CVE-2024-4280

  • EPSS 0.43%
  • Veröffentlicht 14.05.2024 15:43:12
  • Zuletzt bearbeitet 15.04.2026 00:35:42

The White Label CMS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_plugin function in all versions up to, and including, 2.7.3. This makes it possible for unauthenticated attacke...

7.2

CVE-2022-4302

Exploit
  • EPSS 17.69%
  • Veröffentlicht 02.01.2023 22:15:16
  • Zuletzt bearbeitet 10.04.2025 19:15:52

The White Label CMS WordPress plugin before 2.5 unserializes user input provided via the settings, which could allow high-privilege users such as admin to perform PHP Object Injection when a suitable gadget is present.

6.1

CVE-2022-0422

Exploit
  • EPSS 8.12%
  • Veröffentlicht 07.03.2022 09:15:09
  • Zuletzt bearbeitet 21.11.2024 06:38:35

The White Label CMS WordPress plugin before 2.2.9 does not sanitise and validate the wlcms[_login_custom_js] parameter before outputting it back in the response while previewing, leading to a Reflected Cross-Site Scripting issue