← Back

Krzysztof Furtak

krzysztof-furtak

3 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Kkprogressbar2
kkprogressbar2
3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2024-4535
1Krzysztof Furtak
1Kkprogressbar2
Jun 17, 2026
May 27, 2024
N/A· v4
8.8 HIGH· v3
N/A· v2
The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks
CVE-2024-4534
1Krzysztof Furtak
1Kkprogressbar2
Jun 17, 2026
May 27, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS paylo...Show more
The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attackShow less
CVE-2024-4533
1Krzysztof Furtak
1Kkprogressbar2
Jun 17, 2026
May 27, 2024
N/A· v4
6.5 MEDIUM· v3
N/A· v2
The KKProgressbar2 Free WordPress plugin through 1.1.4.2 does not sanitize and escape a parameter before using it in a SQL statement, allowing admin users to perform SQL injection attacks