PatchTheCVEsalephpscripts vulnerabilities
Recent CVEs affecting salephpscripts products. 3 tracked.
salephpscripts has 3 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 3. Most recent: 2024-08-30. Highest priority: CVE-2024-3552 (score 72/100).
- CVE-2024-3673 CRITICAL 9.1 UPGRADE The Web Directory Free WordPress plugin before 1.7.3 does not validate a parameter before using it in an inclu
- CVE-2024-3669 MEDIUM 6.8 UPGRADE The Web Directory Free WordPress plugin before 1.7.2 does not sanitise and escape a parameter before outputtin
- CVE-2024-3552 CRITICAL 9.8 UPGRADE The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it
FAQ
How do I fix salephpscripts vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is salephpscripts being exploited right now?
None of the tracked salephpscripts CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which salephpscripts CVE should I patch first?
CVE-2024-3552 currently ranks highest (72/100): The Web Directory Free WordPress plugin before 1.7.0 does not sanitise and escape a parameter before using it .