← Back

Static Page Extended

static_page_extended

Vendor: Static Page Extended Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1763
1Static Page Extended Project
1Static Page Extended
Jun 17, 2026
Jun 13, 2022
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also l...Show more
Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the settingsShow less