PatchTheCVEindieweb post kinds vulnerabilities and fixes
Recent CVEs affecting indieweb post kinds, with upgrade or downgrade steps. 1 tracked.
Also searched as: indiewebpostkinds.
indieweb post kinds has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-10-22. Highest priority: CVE-2015-9494 (score 42/100).
- CVE-2015-9494 MEDIUM 6.1 UPGRADE The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor ide
FAQ
How do I fix indieweb post kinds vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is indieweb post kinds being exploited right now?
None of the tracked indieweb post kinds CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which indieweb post kinds CVE should I patch first?
CVE-2015-9494 currently ranks highest (42/100): The indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor ide.