Invite Anyone

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43327 Aug 18, 14:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Boone Gorges Invite Anyone allows Reflected XSS.4.7. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Invite Anyone

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2017-6955 Mar 17, 09:59 MEDIUM This Month

An issue was discovered in by-email/by-email.php in the Invite Anyone plugin before 1.3.15 for WordPress. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Wordpress Plugin Invite Anyone

NVD GitHub

CVSS 3.1

5.3

EPSS

0.9%

CVE-2024-43327

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Invite Anyone

NVD

CVE-2017-6955

EPSS 1% CVSS 5.3

MEDIUM This Month

PHP WordPress Information Disclosure +2

NVD GitHub