Known vulnerabilities in the n/a plugin
17 security advisories have been published for the n/a plugin. Each entry below states what an attacker can do, what privilege they need, and the version the issue was fixed in.
- N A - Cross-Site Scripting (XSS) (CVE-2026-39071) MEDIUM
- N A - Cross-Site Scripting (XSS) (CVE-2026-39070) MEDIUM
- N A - Privilege Escalation (CVE-2025-66428) HIGH
- N A - PHP Object Injection (CVE-2023-22851) HIGH
- N A - Cross-Site Scripting (XSS) (CVE-2021-41951) MEDIUM
- N A - Security Vulnerability (CVE-2021-37597) CRITICAL
- N A - XML External Entity (XXE) (CVE-2020-21524) CRITICAL
- N A - Cross-Site Scripting (XSS) (CVE-2015-9363) MEDIUM
- N A - Path Traversal (CVE-2019-7429) MEDIUM
- N A - Path Traversal (CVE-2018-20628) HIGH
- N A - Path Traversal (CVE-2018-20626) MEDIUM
- N A - Path Traversal (CVE-2018-20630) MEDIUM
- N A - Path Traversal (CVE-2018-20629) MEDIUM
- N A - Cross-Site Request Forgery (CSRF) (CVE-2019-1000003) HIGH
- N A - Security Vulnerability (CVE-2018-16457) MEDIUM
- N A - SQL Injection (CVE-2017-7719) CRITICAL
- N A - Cross-Site Scripting (XSS) (CVE-2015-3429) MEDIUM