Download Plugins And Themes From Dashboard

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-17239 Oct 07, 22:15 MEDIUM This Month

includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS Wordpress Plugin Download Plugins And Themes From Dashboard +1

NVD

CVSS 3.1

6.1

EPSS

0.9%

CVE-2019-17239

EPSS 1% CVSS 6.1

MEDIUM This Month

includes/settings/class-alg-download-plugins-settings.php in the download-plugins-dashboard plugin through 1.5.0 for WordPress has multiple unauthenticated stored XSS issues. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress XSS +3

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy