Vulnerabilities > Wpplugins

DATE CVE VULNERABILITY TITLE RISK
2024-11-15 CVE-2024-10825 Cross-site Scripting vulnerability in Wpplugins Hide MY WP Ghost
The Hide My WP Ghost – Security & Firewall plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the URL in all versions up to, and including, 5.3.01 due to insufficient input sanitization and output escaping.
network
low complexity
wpplugins CWE-79
6.1
2023-08-25 CVE-2023-32518 Cross-site Scripting vulnerability in Wpplugins WP Chinese Conversion
Unauth.
network
low complexity
wpplugins CWE-79
6.1
2023-05-09 CVE-2022-4537 Insufficient Verification of Data Authenticity vulnerability in Wpplugins Hide MY WP Ghost
The Hide My WP Ghost – Security Plugin plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 5.0.18.
network
low complexity
wpplugins CWE-345
6.5