Insert Special Characters

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Insert Special Characters

Information

Software Type Plugin
Software Slug insert-special-characters (view on wordpress.org)
Software Status Active
Software Author 10up
Software Website github.com
Software Downloads 57,341
Software Active Installs 4,000
Software Record Last Updated May 14, 2024

9 Vulnerabilities

simple-git < 3.15.0 - Remote Code Execution
9.8
CVE-2022-25912
Dec 5, 2022
Researcher: Sam Wheating
loader-utils (JS package) < 2.0.3 - Prototype Pollution
5.4
CVE-2022-37601
Oct 12, 2022
Researchers:
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
3.7
CVE-2022-37599
Oct 11, 2022
Researchers:
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service
3.7
CVE-2022-37603
Oct 11, 2022
Researchers:
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation
7.5
CVE-2022-24775
Jul 19, 2022
Researchers:
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS)
7.5
CVE-2021-43307
May 13, 2022
Researchers:
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution
7.8
CVE-2021-43138
Apr 7, 2022
Researchers:
Minimist <= 1.2.5 - Prototype Pollution
9.8
CVE ID Unknown
Mar 18, 2022
Researchers:
ansi-regex >=2.1.1 <3.0.1 >=4.0.0 <4.1.1 >=5.0.0 <5.0.1 >=6.0.0 <6.0.1 - Regular Expression Denial of Service (ReDoS)
7.5
CVE ID Unknown
Sep 9, 2021
Researchers:
Title Status CVE ID CVSS Researchers Date
simple-git < 3.15.0 - Remote Code Execution Patched CVE-2022-25912 9.8 Sam Wheating December 5, 2022
loader-utils (JS package) < 2.0.3 - Prototype Pollution Patched CVE-2022-37601 5.4 October 12, 2022
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service Patched CVE-2022-37599 3.7 October 11, 2022
loader-utils (JS package) < 3.2.1 - Regular Expression Denial of Service Patched CVE-2022-37603 3.7 October 11, 2022
guzzlehttp/psr7 <= 1.84 and 2.0.0-2.1.0 - Improper Input Validation Patched CVE-2022-24775 7.5 July 19, 2022
semver-regex <= 3.1.3 and 4.0.0-4.0.3 - Regular Expression Denial of Service (ReDoS) Patched CVE-2021-43307 7.5 May 13, 2022
async <= 2.6.3 and 3-3.2.2 - Prototype Pollution Patched CVE-2021-43138 7.8 April 7, 2022
Minimist <= 1.2.5 - Prototype Pollution Patched 9.8 March 18, 2022
ansi-regex >=2.1.1 <3.0.1 >=4.0.0 <4.1.1 >=5.0.0 <5.0.1 >=6.0.0 <6.0.1 - Regular Expression Denial of Service (ReDoS) Patched 7.5 September 9, 2021

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation