Medium 4.8
2024-04-18< 2.7
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file'
Minimum safe version
2.7
Update to 2.7 or later to address 3 fixable vulnerabilities
WPB Show Core <= 2.6 - Reflected Cross-Site Scripting via 'file'
CVE-2024-1956
CVE-2024-1292
WPB Show Core <= 2.2 - Unauthenticated Server Side Request Forgery
WPB Show Core <= 2.2 - Unauthenticated Local File Inclusion
WordPress WPB Show Core plugin <= 2.2 - Reflected Cross-Site Scripting (XSS) vulnerability