Read the docs

A WP Life

Records43All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high20CVSS 7.0–8.9

Exploited now

A WP Life records in CISA KEV

No A WP Life vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Event Monster 6 records HIGH Album Gallery 2 records LOW Blog Filter 2 records LOW Formula 2 records LOW Slider Responsive Slideshow 2 records MEDIUM Weather Effect 2 records LOW Coming Soon Maintenance Mode 1 record LOW Contact Form Widget 1 record MEDIUM

Records

2 records in Weather Effect · all components

TI-2021-06965 CVE-2021-24683 · GHSA-gmwg-m5q2-qr9g

Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting

Priority LOW 25

The Weather Effect WordPress plugin before 1.3.4 does not have any CSRF checks in place when saving its settings, and do not validate or escape them, which could lead to Stored Cross-Site Scripting issue.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00412 Published 2021-10-11 Fixed in 1.3.4 CWE-352
TI-2021-06991 CVE-2021-24709 · GHSA-whpx-fg6m-254m

Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Weather Effect WordPress plugin before 1.3.6 does not properly validate and escape some of its settings (like *_size_leaf, *_flakes_leaf, *_speed) which could lead to Stored Cross-Site Scripting issues

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-10-11 Fixed in 1.3.6 CWE-79
Open these records in search →