VYPR

Responsive Filterable Portfolio

by Nik00726

CVEs (2)

  • CVE-2019-25221MedDec 13, 2024
    risk 0.42cvss 6.5epss 0.00

    The Responsive Filterable Portfolio plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all versions up to, and including, 1.0.8 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. …

  • CVE-2023-2119MedApr 18, 2023
    risk 0.40cvss 6.1epss 0.01

    The Responsive Filterable Portfolio plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the search_term parameter in versions up to, and including, 1.0.19 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated…