Read the docs

Androidbubbles

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Androidbubbles records in CISA KEV

No Androidbubbles vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Datepicker 4 records MEDIUM Endless Posts Navigation 1 record LOW Keep Backup Daily 1 record LOW Wp Header Images 1 record LOW

Records

4 records in Wp Datepicker · all components

TI-2024-03635 CVE-2024-3895 · GHSA-6r8w-jhg7-gpr9

WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 42

The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdp_add_new_datepicker_ajax() function in all versions up to, and including, 2.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2024-05-02 No fix listed CWE-862
TI-2024-11568 CVE-2024-12468 · GHSA-c8mf-72f6-38g5

WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting

Priority LOW 28

The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2024-12-24 No fix listed CWE-79
TI-2024-29631 CVE-2024-44042 · GHSA-rjc7-82j2-g73g

WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79
Open these records in search →