Securemoz Security Audit vulnerabilities
2 known vulnerabilities affecting securemoz/security_audit.
Total CVEs
2
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2021-24901P4MEDIUMCVSS 4.8PoC≤ 1.0.02022-02-28
CVE-2021-24901 [MEDIUM] CWE-79 CVE-2021-24901: The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting,
The Security Audit WordPress plugin through 1.0.0 does not sanitise and escape the Data Id setting, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
nvd
CVE-2015-6828P4MEDIUMCVSS 6.8≤ 1.0.52015-09-16
CVE-2015-6828 [MEDIUM] CWE-20 CVE-2015-6828: The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and ea
The tweet_info function in class/__functions.php in the SecureMoz Security Audit plugin 1.0.5 and earlier for WordPress does not use an HTTPS session for downloading serialized data, which allows man-in-the-middle attackers to conduct PHP object injection attacks and execute arbitrary PHP code by modifying the client-server data stream. NOTE: some of t
nvd