Read the docs

Designchemical

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Designchemical records in CISA KEV

No Designchemical vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Jquery Accordion Menu Widget 1 record LOW Social Network Tabs 1 record MEDIUM

Records

2 records

TI-2018-14578 CVE-2018-20555 · GHSA-2w4c-hx38-p886

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote…

Priority MEDIUM 55

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php s…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10401 Published 2019-03-18 No fix listed CWE-200
TI-2023-04502 CVE-2023-4890 · GHSA-3fjr-j3qm-96cp

JQuery Accordion Menu Widget <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The JQuery Accordion Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcwp-jquery-accordion' shortcode in versions up to, and including, 3.1.2 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00514 Published 2023-09-12 No fix listed CWE-79
Open these records in search →