supsystic

56 results · Feed

• Medium 4.3
  CVE-2024-31271

  WordPress Ultimate Maps plugin <= 1.2.16 - Cross Site Request Forgery vulnerability

  Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Ultimate Maps by Supsystic.This issue affects Ultimate Maps by Supsystic: from n/a through 1.2.16.

  supsystic Ultimate Maps by Supsystic
  Apr 12, 2024
• Medium 5.9
  CVE-2024-30448

  WordPress Slider by Supsystic plugin <= 1.8.10 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic Slider by Supsystic allows Stored XSS.This issue affects Slider by Supsystic: from n/a through 1.8.10.

  supsystic Slider by Supsystic
  Mar 29, 2024
• High 7.6
  CVE-2024-30237

  WordPress Slider by Supsystic plugin <= 1.8.10 - SQL Injection vulnerability

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Supsystic Slider by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.10.

  supsystic Slider by Supsystic
  Mar 28, 2024
• Medium 5.9
  CVE-2024-29921

  WordPress Photo Gallery by Supsystic plugin <= 1.15.16 - Cross Site Scripting (XSS) vulnerability

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in supsystic Photo Gallery by Supsystic gallery-by-supsystic.This issue affects Photo Gallery by Supsystic: from n/a through <= 1.15.16.

  supsystic Photo Gallery by Supsystic
  Mar 27, 2024
• Medium 5.9
  CVE-2023-49191

  WordPress GDPR Cookie Consent by Supsystic Plugin <= 2.1.2 is vulnerable to Cross Site Scripting (XSS)

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Supsystic GDPR Cookie Consent by Supsystic allows Stored XSS.This issue affects GDPR Cookie Consent by Supsystic: from n/a through 2.1.2.

  supsystic GDPR Cookie Consent by Supsystic
  Dec 15, 2023
• Medium 5.4
  CVE-2023-45068

  WordPress Contact Form by Supsystic Plugin <= 1.7.27 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Contact Form by Supsystic plugin <= 1.7.27 versions.

  supsystic Contact Form by Supsystic
  Oct 12, 2023
• High 7.1
  CVE-2023-33926

  WordPress Easy Google Maps Plugin <= 1.11.7 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Easy Google Maps plugin <= 1.11.7 versions.

  supsystic Easy Google Maps
  May 28, 2023
• Medium 4.3
  CVE-2023-22714

  WordPress Coming Soon by Supsystic Plugin <= 1.7.10 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.

  supsystic Coming Soon by Supsystic
  May 22, 2023
• Medium 4.3
  CVE-2022-47155

  WordPress Slider by Supsystic Plugin <= 1.8.5 is vulnerable to Cross Site Request Forgery (CSRF)

  Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Slider by Supsystic plugin <= 1.8.5 versions.

  supsystic Slider by Supsystic
  Mar 14, 2023
• Medium 6.3
  CVE-2022-27235

  WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Broken Access Control vulnerabilities

  Multiple Broken Access Control vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

  supsystic Social Share Buttons by Supsystic (WordPress plugin) Web / CMS
  Jul 22, 2022
• High 8.5
  CVE-2022-33960

  WordPress Social Share Buttons by Supsystic plugin <= 2.2.3 - Multiple Authenticated SQL Injection (SQLi) vulnerabilities

  Multiple Authenticated (subscriber or higher user role) SQL Injection (SQLi) vulnerabilities in Social Share Buttons by Supsystic plugin <= 2.2.3 at WordPress.

  supsystic Social Share Buttons by Supsystic (WordPress plugin) Web / CMS
  Jul 22, 2022
• Medium 4.3
  CVE-2017-20065

  Supsystic Popup Plugin cross-site request forgery

  A vulnerability was found in Supsystic Popup Plugin 1.7.6 and classified as problematic. This issue affects some unknown processing. The manipulation leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to …

  supsystic Popup Plugin
  Jun 20, 2022
• Medium 5.4
  CVE-2021-36891

  WordPress Photo Gallery by Supsystic plugin <= 1.15.5 - Cross-Site Request Forgery (CSRF) leading to Plugin Settings Change

  Cross-Site Request Forgery (CSRF) vulnerability in Photo Gallery by Supsystic plugin <= 1.15.5 at WordPress allows changing the plugin settings.

  supsystic Photo Gallery by Supsystic (WordPress plugin) Web / CMS
  Jun 15, 2022
• Unscored —
  CVE-2021-24274 Public exploit Scanner template EPSS 18%

  Ultimate Maps by Supsystic < 1.2.5 - Reflected Cross-Site scripting (XSS)

  The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  supsystic Ultimate Maps by Supsystic Web / CMS
  May 5, 2021
• Unscored —
  CVE-2021-24276 Public exploit Scanner template EPSS 16%

  Contact Form by Supsystic < 1.7.15 - Reflected Cross-Site scripting (XSS)

  The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  supsystic Contact Form by Supsystic Web / CMS
  May 5, 2021
• Unscored —
  CVE-2021-24275 Public exploit Scanner template EPSS 18%

  Popup by Supsystic < 1.10.5 - Reflected Cross-Site scripting (XSS)

  The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue

  supsystic Popup by Supsystic Web / CMS
  May 5, 2021