Vulnerabilities > Securemoz

DATE CVE VULNERABILITY TITLE RISK
2022-02-28 CVE-2021-24901 Cross-site Scripting vulnerability in Securemoz Security Audit
The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
network
securemoz CWE-79
3.5
2015-09-16 CVE-2015-6828 Improper Input Validation vulnerability in Securemoz Security Audit
The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man-in-the-middle attackers to conduct PHP object injection attacks and execute arbitrary PHP code by modifying the client-server data stream.
network
securemoz CWE-20
6.8