Known Vulnerabilities for Underconstruction by Underconstruction Project
Listed below are 4 of the newest known vulnerabilities associated with "Underconstruction" by "Underconstruction Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2024-30548 json | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Noah Kagan underConstru... | Not Provided | 2024-03-31 | 2026-04-28 |
| CVE-2022-1896 json | The underConstruction WordPress plugin before 1.21 does not sanitise or escape the "Display a custom page using your own HTML... | 4.8 - MEDIUM | 2022-06-20 | 2022-06-28 |
| CVE-2022-1895 json | The underConstruction WordPress plugin before 1.20 does not have CSRF check in place when deactivating the construction mode,... | 4.3 - MEDIUM | 2022-06-20 | 2022-06-28 |
| CVE-2021-39320 json | The underConstruction plugin <= 1.18 for WordPress echoes out the raw value of `$GLOBALS['PHP_SELF']` in the ucOptions.php fi... | 6.1 - MEDIUM | 2021-09-01 | 2021-09-08 |
| CVE-2013-2699 json | Not Provided | 2014-04-10 | 2026-05-06 |