Skip to content
OpenAdvisories

Vendor

muhammad-rehman

3 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.4

    WP Photo Effects <= 1.2.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    The WP Photo Effects plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'wppe_effect' shortcode in all versions up to, and including, 1.2.4 due to insufficient input sanitization and output escaping on user supplied attributes.…

  • Medium 6.3

    WordPress Remove Duplicate Posts plugin <= 1.3.5 - Broken Access Control vulnerability

    Missing Authorization vulnerability in Muhammad Rehman Remove Duplicate Posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Remove Duplicate Posts: from n/a through 1.3.5.