Vendors / Alain Gonzalez Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now Alain Gonzalez records in CISA KEV No Alain Gonzalez vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
The Accordion Image Menu WordPress plugin through 3.1.3 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payload…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00193 · Published 2024-09-17 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez plugin <= 3.1.2 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00252 · Published 2023-10-03 · No fix listed CWE-352
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability in Alain Gonzalez WP RSS Images plugin <= 1.1 versions.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00256 · Published 2023-07-11 · No fix listed CWE-352
Priority LOW 31
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Alain Gonzalez Google Map Shortcode plugin <= 3.1.2 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00382 · Published 2023-06-19 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 3 1 0 0
