Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Ipdgroup Subscribe
Filtered by product Newsplugin
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-34631 1 Ipdgroup 1 Newsplugin 2021-08-12 6.8 MEDIUM 8.8 HIGH
The NewsPlugin WordPress plugin is vulnerable to Cross-Site Request Forgery via the handle_save_style function found in the ~/news-plugin.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.18.