← Back

Duogeek

duogeek

4 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Simple Image Gallery
simple_image_gallery
1 CVE
Duofaq Responsive Flat Simple Faq
duofaq-responsive-flat-simple-faq
1 CVE
Domain Replace
domain_replace
1 CVE
Simple Amazon Affiliate
simple_amazon_affiliate
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2025-2077
1Duogeek
1Simple Amazon Affiliate
Jun 17, 2026
Mar 12, 2025
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The Simple Amazon Affiliate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escap...Show more
The Simple Amazon Affiliate plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'msg' parameter in all versions up to, and including, 1.0.9 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.Show less
CVE-2022-1218
1Duogeek
1Domain Replace
Jun 17, 2026
May 23, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Domain Replace WordPress plugin through 1.3.8 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting
CVE-2021-39319
1Duogeek
1Duofaq Responsive Flat Simple Faq
Jun 17, 2026
Dec 14, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The duoFAQ - Responsive, Flat, Simple FAQ WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/duogeek/duogeek-panel.php file which allows attackers to inject arbitrary web...Show more
The duoFAQ - Responsive, Flat, Simple FAQ WordPess plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/duogeek/duogeek-panel.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.4.8.Show less
CVE-2021-39313
1Duogeek
1Simple Image Gallery
Jun 17, 2026
Dec 14, 2021
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/simple-image-gallery.php file which allows attackers to inject arbitrary web scripts, in vers...Show more
The Simple Image Gallery WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the msg parameter found in the ~/simple-image-gallery.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.6.Show less