MN
Vendor
Mm-breaking News Project
2
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-8056 | MN Mm-breaking News Mm-breaking News Project | 6.1 | Sep 12 | The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an attribute, which could lead to Reflected… |
| CVE-2024-8054 | MN Mm-breaking News Mm-breaking News Project | 6.1 | Sep 12 | The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make… |