Skip to content
OpenAdvisories

Vendor

gqevu6bsiz

4 known vulnerabilities.

Products

Announce from the Dashboard 2 My WP Customize Admin/Frontend 1 WP Admin UI Customize 1
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.8
    CVE-2024-55864

    Cross-site scripting vulnerability exists in My WP Customize Admin/Frontend versions prior to ver 1.24.1. If a maliciou…

    gqevu6bsiz My WP Customize Admin/Frontend
  • Medium 4.8
    CVE-2024-53278

    Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14. If a malicious admin u…

    gqevu6bsiz WP Admin UI Customize
  • Medium 4.4
    CVE-2024-3030

    Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting

    The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticat…

    gqevu6bsiz Announce from the Dashboard Web / CMS
  • Medium 5.9
    CVE-2023-25716

    WordPress Announce from the Dashboard Plugin <= 1.5.1 is vulnerable to Cross Site Scripting (XSS)

    Auth (admin+) Stored Cross-Site Scripting (XSS) vulnerability in gqevu6bsiz Announce from the Dashboard plugin <= 1.5.1 versions.

    gqevu6bsiz Announce from the Dashboard