Wptouch Security Vulnerabilities and Issues — Wptouch CVE List

BravenewcodeWptouch

4 matches found

CVE•added 2023/01/09 10:13 p.m.•61 views

CVE-2022-3416

The WPtouch WordPress plugin is affected: versions before 4.3.45 do not properly validate uploaded images, allowing high-privilege users (e.g., admins) to upload arbitrary files to the server (including in multisite setups). This is documented across multiple sources (Red Hat CVE entry, OpenVAS n...

7.2CVSS6.8AI score0.17285EPSS

CVE•added 2023/01/09 10:13 p.m.•58 views

CVE-2022-3417

The CVE-2022-3417 entry concerns the WPtouch WordPress plugin,

8.8CVSS8.8AI score0.00922EPSS

CVE•added 2011/04/07 2:0 p.m.•49 views

CVE-2010-4779

The CVE-2010-4779 entry concerns the WPtouch WordPress plugin, where an XSS flaw exists in lib/includes/auth.inc.php affecting WPtouch versions 1.9.19.4 and 1.9.20. The vulnerability allows remote attackers to inject arbitrary script or HTML via the wptouch_settings parameter to include/adsense-n...

4.3CVSS5.9AI score0.01901EPSS

Web

CVE•added 2011/12/14 12:0 a.m.•45 views

CVE-2011-4803

Affected software: WordPress WPtouch plugin. Vulnerable component: wptouch/ajax.php; issue: SQL injection via the id parameter that allows remote execution of arbitrary SQL commands. Root cause: improper validation/escaping in the Ajax endpoint. Impact: potential data modification, query manipula...

7.5CVSS8.8AI score0.02754EPSS

Web