Print My Blog Project: >> Print My Blog >> 1.5.0 Security Vulnerabilities
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Michael Nelson Print My Blog allows Stored XSS.This issue affects Print My Blog: from n/a through 3.27.0.
CVSS Score
5.9
EPSS Score
0.001
Published
2024-07-22
The Print My Blog WordPress Plugin before 3.4.2 does not enforce nonce (CSRF) checks, which allows attackers to make logged in administrators deactivate the Print My Blog plugin and delete all saved data for that plugin by tricking them to open a malicious link
CVSS Score
8.1
EPSS Score
0.001
Published
2021-09-20
Server Side Request Forgery (SSRF) exists in the Print My Blog plugin before 1.6.7 for WordPress via the site parameter.
CVSS Score
9.8
EPSS Score
0.025
Published
2019-04-27