Skip to content
OpenAdvisories

Vendor

uPress

3 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 4.3

    WordPress Booter plugin <= 1.5.7 - Broken Access Control vulnerability

    Missing Authorization vulnerability in uPress Booter booter-bots-crawlers-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Booter: from n/a through <= 1.5.7.

  • Medium 6.1

    Enable Accessibility <= 1.4.1 - Reflected Cross-Site Scripting

    The Enable Accessibility plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions up to, and including, 1.4.1. This makes it possible for un…

  • Medium 4.3

    WordPress Enable Accessibility Plugin <= 1.4 is vulnerable to Cross Site Request Forgery (CSRF)

    Cross-Site Request Forgery (CSRF) vulnerability in uPress Enable Accessibility plugin <= 1.4 versions.