Mm-breaking News Project Mm-breaking News — known CVE vulnerabilities

Every CVE whose affected-product data names Mm-breaking News Project Mm-breaking News, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2024-8054 — CVSS 6.1 (medium): The MM-Breaking News WordPress plugin through 0.7.9 does not have CSRF check in some places, and is missing sanitisation as well as…
• CVE-2024-8056 — CVSS 6.1 (medium): The MM-Breaking News WordPress plugin through 0.7.9 does not escape the $_SERVER['REQUEST_URI'] parameter before outputting it back in an…