Read the docs

Androidbubbles

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Androidbubbles records in CISA KEV

No Androidbubbles vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Datepicker 4 records MEDIUM Endless Posts Navigation 1 record LOW Keep Backup Daily 1 record LOW Wp Header Images 1 record LOW

Records

7 records

TI-2024-03635 CVE-2024-3895 · GHSA-6r8w-jhg7-gpr9

WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 42

The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdp_add_new_datepicker_ajax() function in all versions up to, and including, 2.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2024-05-02 No fix listed CWE-862
TI-2022-01686 CVE-2022-1820 · GHSA-xm65-rj8f-7744

Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting

Priority LOW 29

The Keep Backup Daily plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘t’ parameter in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01113 Published 2022-06-13 No fix listed CWE-79
TI-2021-07080 CVE-2021-24798 · GHSA-5g3f-4m9c-jvq6

WP Header Images < 2.0.1 - Reflected Cross-Site Scripting

Priority LOW 29

The WP Header Images WordPress plugin before 2.0.1 does not sanitise and escape the t parameter before outputting it back in the plugin's settings page, leading to a Reflected Cross-Site Scripting issue

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-11-08 Fixed in 2.0.1 CWE-79
TI-2024-11568 CVE-2024-12468 · GHSA-c8mf-72f6-38g5

WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting

Priority LOW 28

The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2024-12-24 No fix listed CWE-79
TI-2024-29631 CVE-2024-44042 · GHSA-rjc7-82j2-g73g

WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79
Open these records in search →