Prasadkirpekar vulnerabilities
6 vulnerabilities
Known vulnerabilities in Prasadkirpekar products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 4 products.
Products
4- Wp Meta And Date Remover4 vulnerabilities
- Wp Free Ssl2 vulnerabilities
- Advanced Custom CSS1 vulnerabilities
- WP Free SSL – Free SSL Certificate For Wordpress And Force Https1 vulnerabilities
HighCVE-2025-68878prasadkirpekar · advanced custom css +1 moreWordPress Advanced Custom CSS plugin <= 1.1.0 - Reflected Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prasadkirpekar Advanced Custom CSS advanced-custom-css allows Reflected XSS.This issue affects Advanced Custom CSS: from n/a through <= 1.1.0.EPSS0.18%MediumCVE-2022-49745starplugins · easy_age_verify +1239 moreFreemius SDK <= 2.4.2 - Missing Authorization ChecksThe Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.EPSS0.44%MediumCVE-2024-13362100plugins · open_user_map +262 moreFreemius <= 2.10.1 - Reflected DOM-Based Cross-Site Scripting via url ParameterMultiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.EPSS0.28%HighCVE-2024-44020prasadkirpekar · wp_free_ssl +2 moreWordPress WP Free SSL plugin <= 1.2.6 - Broken Access Control vulnerabilityMissing Authorization vulnerability in prasadkirpekar WP Free SSL – Free SSL Certificate for WordPress and force HTTPS wp-free-ssl.This issue affects WP Free SSL – Free SSL Certificate for WordPress and force HTTPS: from n/a through <= 1.2.7.EPSS0.22%MediumCVE-2023-47836prasadkirpekar · wp_meta_and_date_remover +1 moreWordPress WP Meta and Date Remover plugin <= 2.3.0 - Broken Access Control vulnerabilityMissing Authorization vulnerability in prasadkirpekar WP Meta and Date Remover wp-meta-and-date-remover allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Meta and Date Remover: from n/a through <= 2.3.0.EPSS0.39%MediumCVE-2023-4823prasadkirpekar · wp_meta_and_date_remover +2 moreWP Meta and Date Remover < 2.2.0 - Subscriber+ Stored XSSThe WP Meta and Date Remover WordPress plugin before 2.2.0 provides an AJAX endpoint for configuring the plugin settings. This endpoint has no capability checks and does not sanitize the user input, which is then later output unescaped. Allowing any authenticated users, such as subscriber change them and perform Stored Cross-Site Scripting.EPSS0.38%