Post Indexer Project Post Indexer — known CVE vulnerabilities

Every CVE whose affected-product data names Post Indexer Project Post Indexer, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-10948 — CVSS 8.1 (high): The Post Indexer plugin before 3.0.6.2 for WordPress has incorrect handling of data passed to the unserialize function.
• CVE-2016-10947 — CVSS 7.2 (high): The Post Indexer plugin before 3.0.6.2 for WordPress has SQL injection via the period parameter by a super admin.