Zinoui Http Headers vulnerabilities
- zinoui http headers HTTP Headers <= 1.19.2 - Authenticated (Administrator+) External Control of File Name or Path to RCE via 'hh_htpasswd_path' and 'hh_www_authenticate_user' Parameters 7.2 High
- zinoui http headers HTTP Headers <= 1.19.2 - Authenticated (Administrator+) CRLF Injection via Custom Header Values 5.5 Medium
- zinoui http headers HTTP Headers <= 1.19.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Custom Headers' Plugin Setting 4.4 Medium
- dimitar ivanov http headers WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF) 4.4 Medium
- dimitar ivanov http headers WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Cross Site Scripting (XSS) 5.9 Medium
- riverside http headers HTTP Headers < 1.18.11 - Admin+ Remote Code Execution 7.2 High
- riverside http headers HTTP Headers < 1.18.8 - Admin+ SQL Injection 7.2 High