What’s Vulnerable › Products

HTTP Headers vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your HTTP Headers version is affected

Latest HTTP Headers vulnerabilities

• CVE-2023-37978 — WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Server Side Request Forgery (SSRF) (CVSS 4.9)
• CVE-2023-37874 — WordPress HTTP Headers Plugin <= 1.18.11 is vulnerable to Cross Site Scripting (XSS) (CVSS 4.8)
• CVE-2023-1208 — HTTP Headers < 1.18.11 - Admin+ Remote Code Execution (CVSS 7.2)
• CVE-2023-1207 — HTTP Headers < 1.18.8 - Admin+ SQL Injection (CVSS 7.2)