Read the docs

dFactory

Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

dFactory records in CISA KEV

No dFactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Responsive Lightbox 6 records HIGH Download Attachments 1 record LOW Post Views Counter 1 record LOW Responsive Lightbox & Gallery 1 record LOW

Records

1 record in Download Attachments · all components

TI-2023-00072 CVE-2023-0076 · GHSA-m967-grxx-4qjp

Download Attachments < 1.3 - Contributor+ Stored XSS

Priority LOW 25

The Download Attachments WordPress plugin before 1.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00482 Published 2023-03-06 Fixed in 1.3
Open these records in search →