WordPress plugin
Insert Special Characters security & vulnerabilities
No known unpatched vulnerabilities in the latest version
All 9 known vulnerabilities are fixed in the latest release. If you run an older version, update to null or newer.
- Critical2
- High4
- Medium1
- Low2
All Insert Special Characters vulnerabilities
| Severity | Vulnerability | CVE | Published |
|---|---|---|---|
| Critical9.8 | Remote Code Execution ≤4.4.0Update to 4.4.1 | CVE-2022-25912 | |
| Medium5.4 | Prototype Pollution ≤4.3.1Update to 4.4.0 | CVE-2022-37601 | |
| Low3.7 | Regular Expression Denial of Service ≤4.3.1Update to 4.4.0 | CVE-2022-37603 | |
| Low3.7 | Regular Expression Denial of Service ≤4.3.1Update to 4.4.0 | CVE-2022-37599 | |
| High7.5 | Improper Input Validation ≤1.0.4Update to 1.0.5 | CVE-2022-24775 | |
| High7.5 | Regular Expression Denial of Service (ReDoS) ≤1.0.4Update to 1.0.5 | CVE-2021-43307 | |
| High7.8 | Prototype Pollution ≤1.0.4Update to 1.0.5 | CVE-2021-43138 | |
| Critical9.8 | Prototype Pollution ≤1.0.4Update to 1.0.5 | — | |
| High7.5 | Regular Expression Denial of Service (ReDoS) ≤1.0.4Update to 1.0.5 | — |
- Critical9.8Remote Code Execution
≤4.4.0Update to 4.4.1
- Medium5.4Prototype Pollution
≤4.3.1Update to 4.4.0
- Low3.7Regular Expression Denial of Service
≤4.3.1Update to 4.4.0
- Low3.7Regular Expression Denial of Service
≤4.3.1Update to 4.4.0
- High7.5Improper Input Validation
≤1.0.4Update to 1.0.5
- High7.5Regular Expression Denial of Service (ReDoS)
≤1.0.4Update to 1.0.5
- High7.8Prototype Pollution
≤1.0.4Update to 1.0.5
- Critical9.8Prototype Pollution
≤1.0.4Update to 1.0.5
- High7.5Regular Expression Denial of Service (ReDoS)
≤1.0.4Update to 1.0.5
Insert Special Characters: common questions
Does Insert Special Characters have known vulnerabilities?
Yes. VulnCrest Radar lists 9 known vulnerabilities in Insert Special Characters: 2 critical, 4 high, 1 medium, 2 low. None are known to affect version null.
How do I check which version of Insert Special Characters I run?
In wp-admin open Plugins → Installed Plugins; the version is shown under the name. Without admin access, our passive Check my site tool can often read it from public files.
What is the most recent Insert Special Characters vulnerability?
CVE-2022-25912, published Dec 5, 2022: simple-git < 3.15.0 - Remote Code Execution. Severity: Critical (CVSS 9.8).
Is any Insert Special Characters vulnerability listed in CISA KEV?
No. None of the known Insert Special Characters vulnerabilities is currently listed in the CISA KEV catalog.
