postMash – custom post order vulnerabilities | LiveThreat CVE Feed

Product

postMash – custom post order

by Joel Starnes · last CVE Mar 15, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 0Medium 1Low 0

Severity

Exploitation

Watch

Add postMash – custom post order to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-25927	9.8	1%	Feb 28	WordPress postMash – custom post order Plugin <= 1.2.0 is vulnerable to SQL Injection Affected: through 1.2.0
CVE-2024-27196	6.1	0%	Mar 15	WordPress postMash – custom post order plugin <= 1.2.0 - Reflected Cross Site Scripting (XSS) vulnerability Affected: through 1.2.0