Blocksera

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Blocksera records in CISA KEV

No Blocksera vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Cryptocurrency Widgets Pack 2 records HIGH Image Hover Effects 2 records MEDIUM

Records

2 records in Cryptocurrency Widgets Pack · all components

TI-2022-03724 CVE-2022-4059 · GHSA-g37r-pfrh-94h3

Cryptocurrency Widgets Pack < 2.0 - Unauthenticated SQLi

HIGH 82

The Cryptocurrency Widgets Pack WordPress plugin before 2.0 does not sanitise and escape some parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0509 Published 2023-01-02 Fixed in 2.0 CWE-89

TI-2022-21925 CVE-2022-44588 · GHSA-g5pg-66qx-2355

WordPress Cryptocurrency Widgets Pack Plugin <=1.8.1 is vulnerable to SQL Injection

MEDIUM 53

Unauth. SQL Injection vulnerability in Cryptocurrency Widgets Pack Plugin <=1.8.1 on WordPress.

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.02449 Published 2022-12-15 No fix listed CWE-89

Open these records in search →

Critical	3
High	0
Medium	7
Low	0
No CVSS	0