BestWebSoft

Records87All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

BestWebSoft records in CISA KEV

No BestWebSoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Contact Form 11 records MEDIUM Contact Form To Db 5 records MEDIUM Error Log Viewer 5 records LOW Visitors Online 4 records MEDIUM Captcha 3 records LOW Facebook Button 3 records LOW Gallery 3 records HIGH Htaccess 3 records MEDIUM

Records

3 records in Htaccess · all components

TI-2020-06938 CVE-2020-8658 · GHSA-2xx3-w7pj-fmgj

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows…

MEDIUM 50

The BestWebSoft Htaccess plugin through 1.8.1 for WordPress allows wp-admin/admin.php?page=htaccess.php&action=htaccess_editor CSRF.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.09918 Published 2020-02-06 No fix listed CWE-352

TI-2017-13669 CVE-2017-18496 · GHSA-4g44-2wm9-33xf

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.

LOW 30

The htaccess plugin before 1.7.6 for WordPress has multiple XSS issues.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.014 Published 2019-08-13 No fix listed CWE-79

TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28

Cross-site scripting in BestWebSoft Captcha

LOW 29

Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00886 Published 2017-05-22 No fix listed CWE-79

Open these records in search →

Critical	4
High	18
Medium	65
Low	0
No CVSS	0