Skip to content

Product

pressography wp comment remix plugin vulnerabilities

3 published CVES affecting pressography wp comment remix plugin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
2
Medium
1
Low
0
Unscored
0
CISA KEV
0

Latest pressography wp comment remix plugin CVEs

Newest publication first

  1. CVE-2008-4733 WP Comment Remix <= 1.4.3 - SQL Injection

    Published
    MediumCVSS 4.3 EPSS 2.1%

    Cross-site scripting (XSS) vulnerability in wpcommentremix.php in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the (1) replytotext, (2) quotetext, (3) originallypostedby, (4) sep, (5) maxtags, (6) tagsep, (7...

  2. CVE-2008-4732 WP Comment Remix < 1.4.4 - SQL Injection

    Published
    HighCVSS 7.5 EPSS 3.5% Public exploit

    SQL injection vulnerability in ajax_comments.php in the WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to execute arbitrary SQL commands via the p parameter.

  3. CVE-2008-4734 WP Comment Remix < 1.4.4 - Cross-Site Request Forgery

    Published
    HighCVSS 7.5 EPSS 1.2%

    Cross-site request forgery (CSRF) vulnerability in the wpcr_do_options_page function in WP Comment Remix plugin before 1.4.4 for WordPress allows remote attackers to perform unauthorized actions as administrators via a request that sets the wpcr_hidden_form_input parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.