websupporter vulnerabilities

Products

• Filter Custom Fields & Taxonomies Light 1
• wp amasin - the amazon affiliate shop 1

Latest websupporter CVEs

Newest publication first

1. CVE-2024-32081 WordPress Filter Custom Fields & Taxonomies Light plugin <= 1.05 - Broken Access Control vulnerability

   Published 2024-06-09

   High·CVSS 8.8 EPSS 0.35%

   Missing Authorization vulnerability in Websupporter Filter Custom Fields & Taxonomies Light.This issue affects Filter Custom Fields & Taxonomies Light: from n/a through 1.05.

2. CVE-2014-4577 WP AmASIN – The Amazon Affiliate Shop <= 0.9.6 - Local File Inclusion

   Published 2014-10-21

   Medium·CVSS 5.0 EPSS 3.7%

   Absolute path traversal vulnerability in reviews.php in the WP AmASIN - The Amazon Affiliate Shop plugin 0.9.6 and earlier for WordPress allows remote attackers to read arbitrary files via a full pathname in the url parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.