Gdragon vulnerabilities
Products
Newest
- gdragon gd rating system GD Rating System <= 3.7.1 - Unauthenticated Stored Cross-Site Scripting via 'title' and 'url' Render Args in gdrts_live_handler AJAX 7.2 High
- gdragon coreactivity: activity logging for wordpress coreActivity: Activity Logging for WordPress <= 3.0 - Unauthenticated PHP Object Injection via 'user_agent' Log Meta Field 8.1 High
- dev4press coreactivity, gdragon coreactivity: activity logging for wordpress +1 more coreActivity < 1.8.1 - Unauthenticated Stored XSS 8.8 High
- gdragon coreactivity: activity logging for wordpress coreActivity: Activity Logging for WordPress <= 2.7 - Authenticated (Subscriber+) SQL Injection 6.5 Medium
- gdragon gd bbpress attachments GD bbPress Attachments <= 4.7.2 - Reflected Cross-Site Scripting 6.1 Medium
- gdragon gd rating system GD Rating System <= 3.6.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via extra_class Parameter 6.4 Medium
- dev4press gd mail queue GD Mail Queue <= 3.9.3 - Unauthenticated Stored Cross-Site Scripting via Email 7.2 High
- dev4press gd bbpress attachments WordPress GD bbPress Attachments Plugin <= 4.3.1 is vulnerable to Cross Site Scripting (XSS) 4.8 Medium