Security Vulnerabilities - CVEs Published In August 2019
The my-wp-translate plugin before 1.0.4 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The my-wp-translate plugin before 1.0.4 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-20
The cforms2 plugin before 15.0.2 for WordPress has CSRF related to the IP address field.
CVSS Score
8.8
EPSS Score
0.003
Published
2019-08-20
The user-access-manager plugin before 1.2 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-20
The user-domain-whitelist plugin before 1.5 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-20
The awesome-support plugin before 3.1.7 for WordPress has XSS via custom information messages.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The awesome-support plugin before 3.1.7 for WordPress has a security issue in which shortcodes are allowed in replies.
CVSS Score
7.5
EPSS Score
0.003
Published
2019-08-20
The wp-all-import plugin before 3.2.5 for WordPress has reflected XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The wp-all-import plugin before 3.2.5 for WordPress has blind SQL injection.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-08-20
The wp-all-import plugin before 3.2.4 for WordPress has no prevention of unauthenticated requests to adminInit.
CVSS Score
7.5
EPSS Score
0.005
Published
2019-08-20