Vulnerabilities > Supsystic

DATE CVE VULNERABILITY TITLE RISK
2021-05-05 CVE-2021-24276 Unspecified vulnerability in Supsystic Contact Form
The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
network
low complexity
supsystic
6.1
2021-05-05 CVE-2021-24275 Unspecified vulnerability in Supsystic Popup
The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
network
low complexity
supsystic
6.1
2021-05-05 CVE-2021-24274 Unspecified vulnerability in Supsystic Ultimate Maps
The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue
network
low complexity
supsystic
6.1
2020-04-23 CVE-2020-12076 Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Data Tables Generator
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions.
network
low complexity
supsystic CWE-352
8.8
2020-04-23 CVE-2020-12075 Incorrect Default Permissions vulnerability in Supsystic Data Tables Generator
The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks capability checks for AJAX actions.
network
low complexity
supsystic CWE-276
8.8
2020-03-23 CVE-2020-9392 Incorrect Default Permissions vulnerability in Supsystic Pricing Table BY Supsystic 1.8.0/1.8.1
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.
network
low complexity
supsystic CWE-276
7.3
2020-02-25 CVE-2020-9394 Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Pricing Table BY Supsystic 1.8.0/1.8.1
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.
network
low complexity
supsystic CWE-352
8.8
2020-02-25 CVE-2020-9393 Cross-site Scripting vulnerability in Supsystic Pricing Table BY Supsystic 1.8.0/1.8.1
An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress.
network
low complexity
supsystic CWE-79
6.1
2019-08-22 CVE-2016-10918 Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Photo Gallery
The gallery-by-supsystic plugin before 1.8.6 for WordPress has CSRF.
network
low complexity
supsystic CWE-352
8.8
2019-08-20 CVE-2016-10915 Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Popup
The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.
network
low complexity
supsystic CWE-352
8.8