PatchTheCVEcartpauj vulnerabilities
Recent CVEs affecting cartpauj products. 6 tracked.
cartpauj has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 6. Most recent: 2014-04-02. Highest priority: CVE-2013-0735 (score 47/100).
- CVE-2013-0736 MEDIUM 6.8 UPGRADE Multiple cross-site request forgery (CSRF) vulnerabilities in the Mingle Forum plugin 1.0.34 and possibly earl
- CVE-2013-0735 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress
- CVE-2013-0734 MEDIUM 4.3 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in the Mingle Forum plugin before 1.0.34 for WordPress all
- CVE-2012-5328 MEDIUM 6.5 UPGRADE Multiple SQL injection vulnerabilities in the Mingle Forum plugin 1.0.32.1 and other versions before 1.0.33 fo
- CVE-2012-5327 MEDIUM 6.5 UPGRADE Multiple SQL injection vulnerabilities in fs-admin/fs-admin.php in the Mingle Forum plugin 1.0.32.1 and other
- CVE-2012-5325 LOW 2.1 UPGRADE Multiple cross-site scripting (XSS) vulnerabilities in the scr_do_redirect function in scr.php in the Shortcod
FAQ
How do I fix cartpauj vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is cartpauj being exploited right now?
None of the tracked cartpauj CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which cartpauj CVE should I patch first?
CVE-2013-0735 currently ranks highest (47/100): Multiple SQL injection vulnerabilities in wpf.class.php in the Mingle Forum plugin before 1.0.34 for WordPress.