Davekiss vulnerabilities
We track 2 vulnerabilities in Davekiss products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 21, 2024.
2vulnerabilities
0critical
2high
0exploited
8.8average CVSS score
Latest Davekiss vulnerabilities
- 8.8 High severity
Vimeography: Vimeo Video Gallery WordPress…: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Dave Kiss Vimeography: Vimeo Video Gallery WordPress Plugin.This issue affects Vimeography: Vimeo Video Gallery WordPress Plugin: from n/a through 2.4.1.
- 8.8 High severity
Vimeography: Vimeo Video Gallery WordPress…: Deserialization of Untrusted Data
The Vimeography: Vimeo Video Gallery WordPress Plugin plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.3.2 via deserialization of untrusted input via the vimeography_duplicate_gallery_serialized in the duplicat