Skip to content
OpenAdvisories

Vendor

gravitymaster97

2 known vulnerabilities.

Products

PDF Generator for Posts & Pages – Export Any Post Type to PDF 1 Custom Field For WP Job Manager 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.4
    CVE-2024-12446

    Post to Pdf <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting

    The Post to Pdf plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'gmptp_single_post' shortcode in all versions up to, and including, 1.0 due to insufficient input sanitization and output escaping on user supplied attributes. …

    gravitymaster97 PDF Generator for Posts & Pages – Export Any Post Type to PDF Web / CMS
  • Medium 4.3
    CVE-2023-7049

    Custom Field For WP Job Manager <= 1.2 - Insecure Direct Object Reference to Sensitive Information Exposure via Shortcode

    The Custom Field For WP Job Manager plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 1.2 via the the 'cm_fieldshow' shortcode due to missing validation on the 'job_id' user controlled key. This makes…

    gravitymaster97 Custom Field For WP Job Manager Web / CMS