WordPress security by component

ViewMedica 9

Plugin description

ViewMedica 9 is a WordPress component with 3 published CVE records in this archive. The latest tracked vulnerability was published Jan 15, 2025; the highest CVE/CNA score is 6.4.

Plugin slug: viewmedica

Latest vulnerability

CVE-2024-13394: ViewMedica 9: Cross-site scripting

ViewMedica 9 is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.

PublishedJan 15, 2025

Safe version guidanceSee mitigation notes

		Safe version
Jan 15, 2025	CVE-2024-13394 ViewMedica 9: Cross-site scripting ViewMedica 9 is affected by cross-site scripting. Exploitation requires at least contributor-level access. Injected script can execute in the affected site's origin when the vulnerable output is viewed.	See mitigation notes	CVE6.4 NVDPending
Jan 07, 2025	CVE-2024-12291 ViewMedica 9: Cross-site request forgery ViewMedica 9 is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE6.1 NVDPending
Jan 07, 2025	CVE-2024-12170 ViewMedica 9: Cross-site request forgery ViewMedica 9 is affected by cross-site request forgery. The vulnerable path is reachable without authentication. Exploitation relies on a signed-in privileged user submitting an attacker-controlled request.	See mitigation notes	CVE5.4 NVDPending