Vendor/product archive

dev4press / gd_bbpress_attachments CVEs

Beta · best-effort

3 CVEs tagged to dev4press / gd_bbpress_attachments — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dev4press vendor archive

CVE-2022-45816

Published Dec 6, 2022

Auth. Stored Cross-Site Scripting (XSS) vulnerability in GD bbPress Attachments plugin <= 4.3.1 on WordPress.

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-5482

Published Aug 18, 2015

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a ..…

CVSS 4.0 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-5481

Published Aug 18, 2015

Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script o…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1