1.1.9

DATE	CVE	VULNERABILITY TITLE	RISK
2023-10-03	CVE-2023-39989	Cross-Site Request Forgery (CSRF) vulnerability in Draftpress Header Footer Code Manager Cross-Site Request Forgery (CSRF) vulnerability in 99robots Header Footer Code Manager plugin <= 1.1.34 versions. network low complexity draftpress CWE-352	8.8
2022-02-24	CVE-2022-0710	Cross-site Scripting vulnerability in Draftpress Header Footer Code Manager The Header Footer Code Manager plugin <= 1.1.16 for WordPress is vulnerable to Reflected Cross-Site Scripting (XSS) via the $_REQUEST['page'] parameter. network draftpress CWE-79	4.3
2021-11-08	CVE-2021-24791	SQL Injection vulnerability in Draftpress Header Footer Code Manager The Header Footer Code Manager WordPress plugin before 1.1.14 does not validate and escape the "orderby" and "order" request parameters before using them in a SQL statement when viewing the Snippets admin dashboard, leading to SQL injections network low complexity draftpress CWE-89	6.5