AA
Product
Advanced Access Manager
9
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 6Low 0
Watch
Add Advanced Access Manager to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-29127 | 6.1 | Mar 19 | WordPress Advanced Access Manager plugin <= 6.9.20 - Reflected Cross Site Scripting (XSS) vulnerability Affected: before 6.9.21 |
| CVE-2023-51674 | 5.4 | Feb 1 | WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Cross Site Scripting (XSS) Affected: through 6.9.18 |
| CVE-2023-51675 | 5.4 | Dec 29 | WordPress Advanced Access Manager Plugin <= 6.9.18 is vulnerable to Open Redirection Affected: before 6.9.19 |
| CVE-2023-50881 | 5.4 | Dec 29 | WordPress Advanced Access Manager Plugin <= 6.9.15 is vulnerable to Cross Site Scripting (XSS) Affected: through 6.9.15 |
| CVE-2021-24830 | 4.8 | Nov 23 | The Advanced Access Manager WordPress plugin before 6.8.0 does not escape some of its settings when outputting them, allowing high privilege users to perform Cross-Site Scripting… Affected: before 6.8.0 |
| CVE-2020-35934 | 4.3 | Jan 1 | The Advanced Access Manager plugin before 6.6.2 for WordPress displays the unfiltered user object (including all metadata) upon login via the REST API (aam/v1/authenticate or… Affected: before 6.6.2 |
Showing 6
