unknown askany vulnerabilities, newest first
Filter
By year: all 2026 2025 2024 2023 2022 2021
- 4.8CVE-2026-121498EPSS 0.1%
The AskAny WordPress plugin before 2.2.1 does not verify that a chat session belongs to the requester before returning or changing it, allowing unauthenticated users who obtain or guess another visitor's session identifier to read that vi…
- 9.8CVE-2026-121497EPSS 0.7%
The AskAny WordPress plugin before 2.2.0 does not validate the extension or content of files attached to chat messages, trusting the browser-supplied file type instead, which allows unauthenticated users to upload PHP files and execute ar…