Wp Finance Security Vulnerabilities and Issues — Wp Finance CVE List

Mch0licWp Finance

2 matches found

CVE•added 2025/02/01 6:00 a.m.•89 views

CVE-2024-13097

The WP Finance WordPress plugin (versions

5.4CVSS5.8AI score0.00693EPSS

Save

CVE•added 2025/02/01 6:00 a.m.•85 views

CVE-2024-13096

The WP Finance WordPress plugin (versions 1.3.6 and earlier ) is vulnerable to a Stored XSS attack via Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks in certain areas of the plugin, combined with insufficient sanitization and escaping of inputs. This allows an attacke...

4.6CVSS5.6AI score0.0017EPSS

Save