| CVE-2026-13415 |
The CMP WordPress plugin before 4.1.18 does not enforce an option-name allow-list when importing settings via one of…
|
7.2
Élevée
|
27 août 2026 |
| CVE-2026-13416 |
The CMP WordPress plugin before 4.1.18 does not sanitise and escape a settings value before outputting it on the…
|
3.5
Faible
|
27 août 2026 |
| CVE-2026-13414 |
The CMP WordPress plugin before 4.1.18 does not perform authorization checks on one of its AJAX actions and relies on a…
|
4.8
Moyenne
|
27 août 2026 |
| CVE-2022-0188 |
The CMP WordPress plugin before 4.0.19 allows any user, even not logged in, to arbitrarily change the coming soon page…
|
Non notée
|
14 févr. 2022 |