Security Vulnerabilities - CVEs Published In August 2019
The nelio-ab-testing plugin before 4.6.4 for WordPress has CSRF in experiment forms.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The church-admin plugin before 1.2550 for WordPress has CSRF affecting the upload of a bible reading plan.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.
CVSS Score
9.8
EPSS Score
0.008
Published
2019-08-16
The js-jobs plugin before 1.0.7 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-08-16
The erident-custom-login-and-dashboard plugin before 3.5 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-16
The 404-to-301 plugin before 2.0.3 for WordPress has SQL injection.
CVSS Score
9.8
EPSS Score
0.633
Published
2019-08-16
The easy-digital-downloads plugin before 2.3.3 for WordPress has SQL injection.
CVSS Score
9.8
EPSS Score
0.007
Published
2019-08-16
The xo-security plugin before 1.5.3 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-16