Unknown Web Directory Free vulnerabilities
3 known vulnerabilities affecting unknown/web_directory_free.
Total CVEs
3
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL2MEDIUM1
Vulnerabilities
Page 1 of 1
CVE-2024-3673CRITICALCVSS 9.1PoCfixed in 1.7.32024-08-30
CVE-2024-3673 [CRITICAL] CWE-22 CVE-2024-3673: The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it i
The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an include(), which could lead to Local File Inclusion issues.
cvelistv5nvd
CVE-2024-3669MEDIUMCVSS 6.8fixed in 1.7.22024-07-30
CVE-2024-3669 [MEDIUM] CWE-79 CVE-2024-3669: The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before
The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
cvelistv5nvd
CVE-2024-3552CRITICALCVSS 9.8PoCfixed in 1.7.02024-06-13
CVE-2024-3552 [CRITICAL] CWE-89 CVE-2024-3552: The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before
The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection with different techniques like UNION, Time-Based and Error-Based.
cvelistv5nvd