bobbingwide

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

bobbingwide records in CISA KEV

No bobbingwide vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Oik 2 records LOW

Records

2 records in Oik · all components

TI-2024-02093 CVE-2024-2256 · GHSA-j4hp-4mqq-mv7f

oik <= 4.10.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The oik plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes such as bw_contact_button and bw_button shortcodes in all versions up to, and including, 4.10.0 due to insufficient in…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00405 Published 2024-03-14 No fix listed CWE-79

TI-2024-29008 CVE-2024-43356 · GHSA-mp47-48q3-3vmr

WordPress oik plugin <= 4.12.0 - Arbitrary File Deletion vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in bobbingwide.This issue affects oik: from n/a through 4.12.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00183 Published 2024-08-26 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	7
Low	0
No CVSS	0