CVE-2024-13055

The Dyn Business Panel WordPress plugin (versions

CVE-2024-13056

The Dyn Business Panel WordPress plugin (version 1.0.0 and prior) is vulnerable to Reflected Cross-Site Scripting (XSS) . The root cause is the failure to sanitize and escape a parameter before outputting it back to the page. This flaw could be exploited to target high-privilege users, such as ad...

CVE-2024-13057

The Dyn Business Panel WordPress plugin (versions through 1.0.0 ) is vulnerable to a Stored XSS attack via Cross-Site Request Forgery (CSRF) . The root cause is a lack of CSRF checks in certain areas combined with missing sanitization and escaping of input. This allows an attacker to trick a logg...