Datafeedr

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Datafeedr records in CISA KEV

No Datafeedr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ads By Datafeedr.com 2 records MEDIUM

Records

2 records in Ads By Datafeedr.com · all components

TI-2023-05379 CVE-2023-5843 · GHSA-97wj-4q63-7pp6

Ads by datafeedr.com <= 1.1.3 - Unauthenticated (Limited) Remote Code Execution

MEDIUM 48

The Ads by datafeedr.com plugin for WordPress is vulnerable to Remote Code Execution in versions up to, and including, 1.1.3 via the 'dfads_ajax_load_ads' function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02637 Published 2023-10-30 No fix listed CWE-94

TI-2023-26828 CVE-2023-49169 · GHSA-vgq8-wrpg-ch5m

WordPress Ads by datafeedr.com Plugin <= 1.2.0 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in datafeedr.Com Ads by datafeedr.Com allows Stored XSS.This issue affects Ads by datafeedr.Com: from n/a through 1.2.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-12-15 No fix listed CWE-79

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0