- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 2
- Registry
- Packagist
Advisories 2
- CVE-2020-13485Unrated
The Knock Knock plugin before 1.2.8 for Craft CMS allows IP Whitelist bypass via an X-Forwarded-For HTTP header.
Affected: fixed in 1.2.8.
- CVE-2020-13486Unrated
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Affected: fixed in 1.2.8.