Read the docs

Devnath verma

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Devnath verma records in CISA KEV

No Devnath verma vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Widget Bundle 3 records MEDIUM Wp Captcha 1 record LOW

Records

3 records in Widget Bundle · all components

TI-2024-04296 CVE-2024-4616 · GHSA-fx33-m9m3-pm96

Widget Bundle <= 2.0.0 - Unauthencated Reflected XSS

Priority MEDIUM 60

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against only unauthenticate…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00408 Published 2024-06-21 No fix listed CWE-79
TI-2024-04617 CVE-2024-4969 · GHSA-2p9j-vp6v-8f8m

Widget Bundle <= 2.0.0 - Widget Disable/Enable via CSRF

Priority MEDIUM 53

The Widget Bundle WordPress plugin through 2.0.0 does not have CSRF checks when logging Widgets, which could allow attackers to make logged in admin enable/disable widgets via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00199 Published 2024-06-21 No fix listed CWE-352
TI-2024-04618 CVE-2024-4970 · GHSA-wxxx-873m-7796

Widget Bundle <= 2.0.0 - Admin+ Stored XSS

Priority LOW 27

The Widget Bundle WordPress plugin through 2.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilt…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00356 Published 2024-06-21 No fix listed CWE-79
Open these records in search →