Skip to content
OpenAdvisories

Vendor

GeneratePress

2 known vulnerabilities.

Products

GP Premium 1 GeneratePress Premium 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2024-3469

    GP Premium <= 2.4.0 - Reflected Cross-Site Scripting

    The GP Premium plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the message parameter in all versions up to, and including, 2.4.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated at…

    GeneratePress GP Premium Web / CMS
  • Medium 6.4
    CVE-2023-6807

    GeneratePress Premium <= 2.3.2 - Authenticated(Contributor+) Stored Cross-Site Scripting via Custom Meta

    The GeneratePress Premium plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's custom meta output in all versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes.…

    GeneratePress GeneratePress Premium Web / CMS