josevega vulnerabilities
5 published CVEs name josevega among the affected products.
- 5Published CVEs5 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-13362
Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter
sebet · Go Fetch Jobs (for WP Job Manager)
Medium6.1 - CVE-2022-4974
Freemius SDK <= 2.4.2 - Missing Authorization Checks
dashlabsltd · YASR – Yet Another Star Rating Plugin for WordPress
Medium6.3 - CVE-2023-6996
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Code Injection
josevega · Display custom fields in the frontend – Post and User Profile Fields
High8.8 - CVE-2023-6982
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via vg_display_data
josevega · Display custom fields in the frontend – Post and User Profile Fields
Medium6.4 - CVE-2023-6983
Display custom fields in the frontend – Post and User Profile Fields <= 1.2.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Post Meta Disclosure
josevega · Display custom fields in the frontend – Post and User Profile Fields
Medium4.3