Read the docs

Acurax

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Acurax records in CISA KEV

No Acurax vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Under Construction / Maintenance Mode 4 records MEDIUM Floating Social Media Icon 1 record LOW Social Media Widget 1 record LOW

Records

1 record in Social Media Widget · all components

TI-2018-04679 CVE-2018-6357 · GHSA-7v6m-79qx-mc6q

The acx_asmw_saveorder_callback function in function.php in the…

Priority LOW 39

The acx_asmw_saveorder_callback function in function.php in the acurax-social-media-widget plugin before 3.2.6 for WordPress has CSRF via the recordsArray parameter to wp-admin/admin-ajax.php, with resultant social_widge…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00649 Published 2018-01-27 No fix listed CWE-352
Open these records in search →