Mr2p vulnerabilities
Products
Newest
- mr2p meta field block – display custom fields in the block editor without coding Meta Field Block <= 1.5.1 - Insecure Direct Object Reference to Authenticated (Contributor+) Arbitrary User Meta Exposure 6.5 Medium
- mr2p meta field block – display custom fields in the block editor without coding Meta Field Block <= 1.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'tagName' Block Attribute 6.4 Medium
- 100plugins open user map, 5starplugins dynamic copyright year, easy age verify +128 more +130 more Freemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url Parameter 6.1 Medium
- mr2p svg block SVG Block <= 1.1.24 - Authenticated (Administrator+) Stored Cross-Site Scripting via SVG File Upload 5.5 Medium