Vendor archive

gwolle_guestbook_project CVEs

Beta · best-effort

4 CVEs tagged to vendor gwolle_guestbook_project — 1 Critical, 0 High, 2 Medium, 1 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2017-20089

Published Jun 23, 2022

A vulnerability was found in Gwolle Guestbook Plugin 1.7.4. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to basic cross sit…

CVSS 3.5 · Low

Vendor/product tagsBeta · best-effort

CVE-2021-24980

Published Dec 27, 2021

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflecte…

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-17884

Published Oct 2, 2018

XSS exists in admin/gb-dashboard-widget.php in the Gwolle Guestbook (gwolle-gb) plugin before 2.5.4 for WordPress via the PATH_INFO to wp-admin/index.php

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

CVE-2015-8351

Published Sep 11, 2017

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1