Miniorange Malware Scanner vulnerabilities

3 vulnerabilities

Known vulnerabilities in Miniorange Malware Scanner, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4.8CVE-2022-1995miniorangemalware_scanner+2
EPSS score
0.58%
The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfiltered_html is disallowed (for example in multisite setup)7.6CVE-2024-25902miniorangemalware_scanner+1
EPSS score
0.54%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in miniorange Malware Scanner.This issue affects Malware Scanner: from n/a through 4.7.2.5.3CVE-2023-52176miniorangemalware_scanner+1
EPSS score
0.40%
Authentication Bypass by Spoofing vulnerability in miniorange Malware Scanner allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Malware Scanner: from n/a through 4.7.1.