Replyable Security Vulnerabilities

CVE-2022-4265

The Replyable WordPress plugin before 2.2.10 does not validate the class name submitted by the request when instantiating an object in the prompt_dismiss_notice action and also lacks CSRF check in the related action. This could allow any authenticated users, such as subscriber to perform Object...

CVE-2015-9411

The Postmatic plugin before 1.4.6 for WordPress has...