vulnerability

WordPress Plugin: jquery-manager: CVE-2020-11023: Dependency on Vulnerable Third-Party Component

Severity
6
CVSS
(AV:N/AC:H/Au:N/C:C/I:P/A:N)
Published
Jul 20, 2020
Added
May 15, 2025
Modified
May 15, 2025

Description

The jQuery Manager for WordPress plugin for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.10.4 and the Enable jQuery Migrate Helper for WordPress is running a vulnerable version of jQuery in all versions up to, and including, 1.4.1. This makes it possible for unauthenticated attackers to malicious web scripts, though it is not verified that the plugin is exploitable through CVE-2020-11023.

Solution

jquery-manager-plugin-cve-2020-11023
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.