tonjoostudio vulnerabilities

Recent CVEs affecting tonjoostudio products. 3 tracked.

tonjoostudio has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2019-09-17. Highest priority: CVE-2016-10974 (score 49/100).

• CVE-2018-5311 MEDIUM 5.4 DOWNGRADE The Easy Custom Auto Excerpt plugin 2.4.6 for WordPress has XSS via the tonjoo_ecae_options[custom_css] parame
• CVE-2016-10975 MEDIUM 6.1 UPGRADE The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has reflected XSS via the skin parameter.
• CVE-2016-10974 HIGH 8.8 UPGRADE The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS.

FAQ

How do I fix tonjoostudio vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is tonjoostudio being exploited right now?

None of the tracked tonjoostudio CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which tonjoostudio CVE should I patch first?

CVE-2016-10974 currently ranks highest (49/100): The fluid-responsive-slideshow plugin before 2.2.7 for WordPress has frs_save CSRF with resultant stored XSS..

Products

• easy custom auto excerpt
• fluid-responsive-slideshow

RSS feed for tonjoostudio · ← Back to latest CVEs