Dev4press vulnerabilities
We track 2 vulnerabilities in Dev4press products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2025.
2vulnerabilities
0critical
2high
0exploited
8.0average CVSS score
Latest Dev4press vulnerabilities
- 8.8 High severity
coreActivity: Activity Logging for WordPress: Improper Neutralization of Input During Web Page Generation
The coreActivity: Activity Logging for WordPress plugin before 1.8.1 does not escape some request data when outputting it back in the admin dashboard, allowing unauthenticated users to perform Stored XSS attack against high privilege users such as admin
- 7.2 High severity
GD Security Headers: Improper Neutralization of Special Elements used in an SQL Command
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Milan Petrovic GD Security Headers allows auth. (admin+) SQL Injection.This issue affects GD Security Headers: from n/a through 1.7.