PatchTheCVEcodesupply vulnerabilities
Recent CVEs affecting codesupply products. 2 tracked.
codesupply has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-09-27. Highest priority: CVE-2024-9025 (score 31/100).
- CVE-2024-9025 MEDIUM 5.3 UPGRADE The Sight – Professional Image Gallery and Portfolio plugin for WordPress is vulnerable to unauthorized access
- CVE-2024-8965 MEDIUM 6.4 UPGRADE The Absolute Reviews plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Name' field of
FAQ
How do I fix codesupply vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is codesupply being exploited right now?
None of the tracked codesupply CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which codesupply CVE should I patch first?
CVE-2024-9025 currently ranks highest (31/100): The Sight – Professional Image Gallery and Portfolio plugin for WordPress is vulnerable to unauthorized access.