TI-2015-07702 CVE-2015-9325 · GHSA-rhf4-2735-rh9w
The visitors-online plugin before 0.4 for WordPress has SQL injection.
Priority MEDIUM 46
The visitors-online plugin before 0.4 for WordPress has SQL injection.
BestWebSoft
Records87All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high18CVSS 7.0–8.9
Exploited now
BestWebSoft records in CISA KEVNo BestWebSoft vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Visitors Online · all components
TI-2017-13710 CVE-2017-18537 · GHSA-9pr9-5973-55vh
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
Priority LOW 31
The visitors-online plugin before 1.0.0 for WordPress has multiple XSS issues.
TI-2021-06642 CVE-2021-24350 · GHSA-98c2-3mpw-gw7c
Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
Priority LOW 30
The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability.
TI-2017-01471 CVE-2017-2171 · GHSA-947h-g3wj-rr28
Cross-site scripting in BestWebSoft Captcha
Priority LOW 29
Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form to DB prior to version…