Read the docs

Cm-wp

Records10All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Cm-wp records in CISA KEV

No Cm-wp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Social Slider Widget 3 records MEDIUM Auto Featured Image 2 records HIGH Clearfy 2 records MEDIUM Woody Code Snippets 2 records LOW Titan Anti-spam & Security 1 record LOW

Records

2 records in Woody Code Snippets · all components

TI-2024-23620 CVE-2024-35751 · GHSA-3mqx-4h5c-2wjr

WordPress Woody code snippets plugin <= 2.4.10 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Creative Motion, Will Bontrager Software, LLC Woody ad snippets allows Stored XSS.This issue affects Woody ad s…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00274 Published 2024-06-08 No fix listed CWE-79
TI-2020-18928 CVE-2020-36759 · GHSA-g3px-65r8-wfgx

Woody code snippets <= 2.3.9 - Cross-Site Request Forgery Bypass

Priority LOW 21

The Woody code snippets plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.3.9.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00476 Published 2023-10-20 Fixed in 2.3.10 CWE-352
Open these records in search →