Automattic: Security Vulnerabilities
WordPress W3 Total Cache Plugin 0.9.2.8 has a Remote PHP Code Execution Vulnerability
CVSS Score
9.8
EPSS Score
0.739
Published
2020-02-12
WordPress Super Cache Plugin 1.3 has XSS.
CVSS Score
6.1
EPSS Score
0.015
Published
2020-02-07
WordPress WP Super Cache Plugin 1.2 has Remote PHP Code Execution
CVSS Score
8.8
EPSS Score
0.13
Published
2020-02-07
WordPress W3 Super Cache Plugin before 1.3.2 contains a PHP code-execution vulnerability which could allow remote attackers to inject arbitrary code. This issue exists because of an incomplete fix for CVE-2013-2009.
CVSS Score
8.8
EPSS Score
0.051
Published
2019-12-26
The Jetpack plugin before 3.4.3 for WordPress has XSS via add_query_arg() and remove_query_arg().
CVSS Score
6.1
EPSS Score
0.009
Published
2019-08-28
The akismet plugin before 3.1.5 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.01
Published
2019-08-28
The CampTix Event Ticketing plugin before 1.5 for WordPress allows CSV injection when the export tool is used.
CVSS Score
7.5
EPSS Score
0.018
Published
2019-07-18
The CampTix Event Ticketing plugin before 1.5 for WordPress allows XSS in the admin section via a ticket title or body.
CVSS Score
4.8
EPSS Score
0.009
Published
2019-07-18
The Jetpack plugin before 4.0.4 for WordPress has XSS via the Likes module.
CVSS Score
6.1
EPSS Score
0.01
Published
2018-01-12
The Jetpack plugin before 4.0.3 for WordPress has XSS via a crafted Vimeo link.
CVSS Score
6.1
EPSS Score
0.01
Published
2018-01-12