Skip to content
OpenAdvisories

Vendor

giuliopanda

5 known vulnerabilities.

Products

ADFO – Custom data in admin dashboard 3 ADFO 1 Bulk images optimizer: Resize, optimize, convert to webp, rename … 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-13390

    ADFO – Custom data in admin dashboard <= 1.9.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'adfo_list' shortcode in all versions up to, and including, 1.9.1 due to insufficient input sanitization and output escaping on user s…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS
  • Medium 4.3
    CVE-2024-9361

    Bulk images optimizer: Resize, optimize, convert to webp, rename ... <= 2.0.1 - Missing Authorization to Authenticated (Subscriber+) Plugin Options Update

    The Bulk images optimizer: Resize, optimize, convert to webp, rename … plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'save_configuration' function in all versions up to, and including, 2.0.1. …

    giuliopanda Bulk images optimizer: Resize, optimize, convert to webp, rename … Web / CMS
  • Medium 6.1
    CVE-2024-4104

    ADFO – Custom data in admin dashboard <= 1.9.0 - Reflected Cross-Site Scripting

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'dbp_id' parameter in all versions up to, and including, 1.9.0 due to insufficient input sanitization and output escaping. This makes it pos…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS
  • Medium 4.3
    CVE-2024-4103

    ADFO – Custom data in admin dashboard <= 1.9.0 - Cross-Site Request Forgery

    The ADFO – Custom data in admin dashboard plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.9.0. This is due to missing or incorrect nonce validation on several functions hooked via the controller() funct…

    giuliopanda ADFO – Custom data in admin dashboard Web / CMS