Wp Cleanfix Vulnerabilities

[en] Missing Authorization vulnerability in Gfazioli WP Cleanfix allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Cleanfix: from n/a through 5.6.2.

Affected:

up to 5.7.0

Fixed in:

5.7.0

Disclosed:

Dec 31, 2024

CVE-2023-48775 on NVD →

The WP Cleanfix plugin for WordPress is vulnerable to unauthorized access of data and modification of data due to a missing capability check on the register function in versions up to, and including, 5.6.2. This makes it possible for authenticated attackers, with subscriber-level access and above, to find and replace p...

CVSS:

7.1

Affected:

up to 5.6.2

Fixed in:

5.7.0

Disclosed:

Nov 28, 2023

CVE-2023-48775 on NVD →

[en] WordPress WP Cleanfix Plugin 2.4.4 has CSRF

Affected:

up to 3.0.2

Fixed in:

3.0.2

Disclosed:

Feb 10, 2020

CVE-2013-2108 on NVD →

[en] WordPress plugin wp-cleanfix has Remote Code Execution

Affected:

up to 5.0.0

Fixed in:

5.0.0

Disclosed:

Feb 10, 2020

CVE-2013-2109 on NVD →

WordPress plugin wp-cleanfix has Remote Code Execution

CVSS:

8.8

Affected:

up to 5.0.0

Fixed in:

5.0.0

Disclosed:

May 18, 2013

CVE-2013-2109 on NVD →

The WP Cleanfix plugin for WordPress is vulnerable to Cross-Site Request Forgery to Cross-Site Scripting in versions up to, and including, 3.0.1. This is due to missing nonce validation in the 'wpCleanFixAjax.php' file. This makes it possible for unauthenticated attackers to gain otherwise restricted access to achieve...

CVSS:

6.1

Affected:

up to 3.0.1

Fixed in:

3.0.2

Disclosed:

Jun 28, 2012

CVE-2013-2108 on NVD →