Skip to content
OpenAdvisories

Vendor

Swift Ideas

2 known vulnerabilities.

Products

Swift Framework 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.3
    CVE-2024-3915

    Swift Framework <= 2.7.31 - Missing Authorization to Unauthenticated Arbitrary Content Update

    The Swift Framework plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the sf_edit_directory_item() function in all versions up to, and including, 2.7.31. This makes it possible for unauthenticated att…

    Swift Ideas Swift Framework Web / CMS
  • Medium 6.4
    CVE-2024-3916

    Swift Framework <= 2.7.31 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodes

    The Swift Framework plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of the plugin's shortcodes in all versions up to, and including, 2.7.31 due to insufficient input sanitization and output escaping on user supplied attributes. T…

    Swift Ideas Swift Framework Web / CMS