Skip to content
OpenAdvisories

Vendor

hijiri

2 known vulnerabilities.

Products

Custom Post Type Generator 1 Intuitive Custom Post Order 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.9
    CVE-2023-33329

    WordPress Custom Post Type Generator Plugin <= 2.4.2 is vulnerable to Cross Site Scripting (XSS)

    Auth. (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Hijiri Custom Post Type Generator plugin <= 2.4.2 versions.

    hijiri Custom Post Type Generator
  • Medium 6.6
    CVE-2023-1016

    Intuitive Custom Post Order <= 3.1.4.1 - Authenticated (Admin+) SQL Injection

    The Intuitive Custom Post Order plugin for WordPress is vulnerable to SQL Injection in versions up to, and including, 3.1.4.1, due to insufficient escaping on the user supplied 'objects' and 'tags' parameters and lack of sufficient preparation in the 'update_…

    hijiri Intuitive Custom Post Order Web / CMS