Skip to content

Vendor

danialhatami vulnerabilities

2 published CVES affecting danialhatami, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0
Atom feed of danialhatami alerts

Products

Latest danialhatami CVEs

Newest publication first

  1. CVE-2023-7167 Persian Fonts <= 1.6 - Admin+ Stored XSS

    Published
    MediumCVSS 6.1 EPSS 0.40%

    The Persian Fonts WordPress plugin through 1.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite s...

  2. CVE-2023-3510 FTP Access <= 1.0 - Subscriber+ Stored XSS

    Published
    MediumCVSS 5.4 EPSS 0.22%

    The FTP Access WordPress plugin through 1.0 does not have authorisation and CSRF checks when updating its settings and is missing sanitisation as well as escaping in them, allowing any authenticated users, such as subscriber to update them with XSS payloads, which will be trigger...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.