Gd Bbpress Attachments

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-45816 Dec 06, 22:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Gd Bbpress Attachments Dev4Press

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2015-5482 Aug 18, 17:59 MEDIUM POC PATCH This Month

Directory traversal vulnerability in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote administrators to include and execute arbitrary local files via a .. Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress Path Traversal Wordpress Plugin Gd Bbpress Attachments +1

NVD

CVSS 2.0

4.0

EPSS

0.7%

CVE-2015-5481 Aug 18, 17:59 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in forms/panels.php in the GD bbPress Attachments plugin before 2.3 for WordPress allows remote attackers to inject arbitrary web script or HTML via the tab. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wordpress Plugin Gd Bbpress Attachments +1

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2022-45816

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Gd Bbpress Attachments +1

NVD

CVE-2015-5482

EPSS 1% CVSS 4.0

MEDIUM POC PATCH This Month

PHP WordPress Path Traversal +3

NVD

CVE-2015-5481

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +3

NVD