2 matches found
CVE-2018-20972
The companion-auto-update plugin before 3.2.1 for WordPress has CSRF.
CVE-2018-20973
The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion.