Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2022-0898

IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting

The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Getigniteup
Products
Igniteup
CVE-2019-17237

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows CSRF.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Getigniteup
Products
Igniteup
CVE-2019-17236

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress is vulnerable to stored XSS.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Getigniteup
Products
Igniteup
CVE-2019-17235

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows information disclosure.

CVSS 3.1 · 5.3 Medium EPSS 1.4% KEV · Not listed
Vendors
Getigniteup
Products
Igniteup
CVE-2019-17234

includes/class-coming-soon-creator.php in the igniteup plugin through 3.4 for WordPress allows unauthenticated arbitrary file deletion.

CVSS 3.1 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Getigniteup
Products
Igniteup