iohex

202120222023

Critical

High

Medium

Low

Global Rank

#189

of 3,238 researchers

Vulns

28

Critical0

High0

Medium28

Low0

Affected Assets

74

74plugins

Avg CVSS

5.7

Average score of vulnerabilities

Researcher Submissions

28 records


2023-06-05 00:00	Editorial Calendar <= 3.8.0 - Authenticated(Contributor+) Stored Cross-Site Scripting via edcal_saveoptions AJAX action Editorial Calendar <= 3.8.0	`CVE-2022-4115`	6.4 Medium	iohex	Yes
2022-12-23 00:00	Link Library <= 7.4 - Authenticated (Admin+) Stored Cross-Site Scripting Link Library <= 7.4	`CVE-2022-4199`	5.5 Medium	iohex	Yes
2022-12-21 00:00	WP Attachments <= 5.0.5 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Attachments <= 5.0.5	`CVE-2022-4330`	5.5 Medium	iohex	Yes
2022-12-09 00:00	Image Optimizer, Resizer and CDN – Sirv <= 6.8.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Image Optimizer, Resizer and CDN <= 6.8.0	`CVE-2022-4119`	5.5 Medium	iohex	Yes
2022-12-07 00:00	Login with Cognito <= 1.4.8 - Authenticated (Admin+) Stored Cross-Site Scripting Login with Cognito <= 1.4.8	`CVE-2022-4200`	5.5 Medium	iohex	Yes
2022-12-06 00:00	WordPress Filter Gallery Plugin <= 0.1.5 - Authenticated (Administrator+) Stored Cross-Site Scripting Filter Gallery <= 0.1.5	`CVE-2022-4142`	5.5 Medium	iohex	Yes
2022-12-06 00:00	WP-Ban <= 1.69 - Authenticated (Administrator+) Stored Cross-Site Scripting WP-Ban <= 1.69	`CVE-2022-4260`	5.5 Medium	iohex	Yes
2022-12-06 00:00	All-in-One Addons for Elementor - WidgetKit <= 2.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting All-in-One Addons for Elementor <= 2.4.3	`CVE-2022-4256`	5.5 Medium	iohex	Yes
2022-12-02 00:00	ImageInject <= 1.18 - Authenticated (Admin+) Stored XSS ImageInject <= 1.18	`CVE-2022-4243`	5.5 Medium	iohex	No
2022-12-02 00:00	WP Google Review Slider <= 11.5 - Authenticated (Administrator+) Stored Cross-Site Scripting WP Google Review Slider <= 11.5	`CVE-2022-4242`	5.5 Medium	iohex	Yes

Showing 1–10 of 28 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C