Wp Adminify Security Vulnerabilities and Issues — Wp Adminify CVE List

Lucene search

WpadminifyWp Adminify

4 matches found

CVE•added 2023/10/02 11:15 a.m.•53 views

CVE-2023-44266

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jewel Theme WP Adminify plugin

5.9CVSS5.1AI score0.00063EPSS

CVE•added 2023/12/31 6:15 p.m.•44 views

CVE-2023-52132

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Jewel Theme WP Adminify.This issue affects WP Adminify: from n/a through 3.1.6.

7.6CVSS7.7AI score0.00139EPSS

CVE•added 2023/09/11 8:15 p.m.•33 views

CVE-2023-4060

The WP Adminify WordPress plugin before 3.1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup)

4.8CVSS4.9AI score0.00169EPSS

CVE•added 2024/10/24 12:15 p.m.•33 views

CVE-2024-8959

The WP Adminify – Custom WordPress Dashboard, Login and Admin Customizer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via SVG File uploads in all versions up to, and including, 4.0.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authen...

6.4CVSS5.9AI score0.00053EPSS