Known vulnerabilities in the Changeset plugin

14 security advisories have been published for the Changeset plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.

Changeset - Broken Access Control (CVE-2026-8382) MEDIUM 2026-05-31
Changeset - Broken Access Control (CVE-2026-47100) HIGH 2026-05-19
Changeset - SQL Injection (CVE-2026-3396) HIGH 2026-04-08
Changeset - Path Traversal (CVE-2025-0818) MEDIUM 2025-08-13
Changeset - Cross-Site Scripting (XSS) (CVE-2024-11904) MEDIUM 2024-12-07
Changeset - Cross-Site Scripting (XSS) (CVE-2024-11943) MEDIUM 2024-12-07
Changeset - Cross-Site Scripting (XSS) (CVE-2024-11231) MEDIUM 2024-11-23
Changeset - Cross-Site Scripting (XSS) (CVE-2024-11229) MEDIUM 2024-11-23
Changeset - Cross-Site Scripting (XSS) (CVE-2024-11228) MEDIUM 2024-11-23
Changeset - Security Vulnerability (CVE-2022-36375) HIGH 2022-07-25
Changeset - Security Vulnerability (CVE-2022-33969) HIGH 2022-07-25
Changeset - Information Disclosure (CVE-2022-0236) HIGH 2022-01-18
Changeset - Broken Access Control (CVE-2021-39317) HIGH 2021-10-11
Changeset - Security Vulnerability (CVE-2021-39342) MEDIUM 2021-09-29

Browse the full threat database

WordPress security that blocks attacks before they land.

sales@hackhalt.com

© Hack Halt Inc. All rights reserved.