Wp Finance Security Vulnerabilities and Issues — Wp Finance CVE List

Mch0licWp Finance

2 matches found

CVE•added 2025/02/01 6:00 a.m.•80 views

CVE-2024-13097

The WP Finance WordPress plugin (versions

5.8AI score0.00693EPSS

Save

CVE•added 2025/02/01 6:00 a.m.•78 views

CVE-2024-13096

The WP Finance WordPress plugin (versions 1.3.6 and earlier ) is vulnerable to Stored XSS via CSRF . The root cause is a lack of CSRF checks in certain areas, combined with missing sanitisation and escaping . This allows an attacker to trick a logged-in administrator into adding Stored XSS payloa...

5.6AI score0.0017EPSS

Save