shinephp vulnerabilities

Products

• thank you counter button 1
• User Role Editor 1

Latest shinephp CVEs

Newest publication first

1. CVE-2024-12293 User Role Editor <= 4.64.3 - Cross-Site Request Forgery to Privilege Escalation

   Published 2024-12-17

   High·CVSS 8.8

   The User Role Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 4.64.3. This is due to missing or incorrect nonce validation on the update_roles() function. This makes it possible for unauthenticated attackers to add or...

2. CVE-2014-2315 Thank You Counter Button <= 1.9.3 - Cross-Site Scripting

   Published 2014-03-09

   Medium·CVSS 4.3

   Multiple cross-site scripting (XSS) vulnerabilities in the Thank You Counter Button plugin 1.8.7 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) thanks_caption, (2) thanks_caption_style, or (3) thanks_style parameter to wp-admin/options.php...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.