Chartify vulnerabilities

2 known vulnerabilities in Chartify from Ays-pro. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Chartify – WordPress Chart Plugin: Improper Control of Filename for Include/Require Statement in PHP Program

  CVE-2024-10571Nov 14, 2024Ays-proEPSS 4.81%

  The Chartify – WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. This makes it possible for unauthenticated attackers to include and execute arbitrary files

• 7.1 High severity

  Chartify: Improper Neutralization of Input During Web Page Generation

  CVE-2024-47347Oct 6, 2024Ays-pro

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Ays Pro Chartify chart-builder allows Reflected XSS.This issue affects Chartify: from n/a through <= 2.7.6.