Forumpress

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-6625 HIGH POC PATCH This Week

SQL injection vulnerability in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the groupid. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress SQLi PHP Forumpress

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

3.0%

CVE-2012-6623 MEDIUM PATCH This Month

Cross-site scripting (XSS) vulnerability in fs-admin/wpf-add-forum.php in the ForumPress WP Forum Server plugin before 1.7.5 for WordPress allows remote attackers to inject arbitrary web script or. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable.

WordPress PHP XSS Forumpress

NVD

CVSS 2.0

4.3

EPSS

0.4%

CVE-2012-6622 MEDIUM POC PATCH This Month

Multiple cross-site scripting (XSS) vulnerabilities in fs-admin/fs-admin.php in the ForumPress WP Forum Server plugin before 1.7.4 for WordPress allow remote attackers to inject arbitrary web script. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

WordPress PHP XSS Forumpress

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

4.1%

CVE-2012-6625

EPSS 3% CVSS 7.5

HIGH POC PATCH This Week

WordPress SQLi PHP +1

NVD Exploit-DB

CVE-2012-6623

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress PHP XSS +1

NVD

CVE-2012-6622

EPSS 4% CVSS 4.3

MEDIUM POC PATCH This Month

WordPress PHP XSS +1

NVD Exploit-DB