Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2022-0710

Header Footer Code Manager <= 1.1.16 Reflected XSS

The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter.

CVSS 3.1 · 6.1 Medium EPSS 2.4% KEV · Not listed
Vendors
Draftpress
Products
Header Footer Code Manager
CVE-2023-39989

WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed
Vendors
Draftpress
Products
Header Footer Code Manager
CVE-2022-0899

Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting

The Header Footer Code Manager WordPress plugin before 1.1.24 does not escape generated URLs before outputting them back in attributes in an admin page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed
Vendors
Draftpress
Products
Header Footer Code Manager
CVE-2021-24791

Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections

The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections

CVSS 3.1 · 7.2 High EPSS 5.2% KEV · Not listed
Vendors
Draftpress
Products
Header Footer Code Manager
CVE-2021-24445

My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)

The My Site Audit WordPress plugin through 1.2.4 does not sanitise or escape the Audit Name field when creating an audit, allowing high privilege users to set JavaScript payloads in them, even when he unfiltered_html capability is disallowed, leading to an authenticated Stored Cross-Site Scripting issue

CVSS 3.1 · 5.5 Medium EPSS < 1% KEV · Not listed
Vendors
Draftpress
Products
My Site Audit