Read the docs

Display-widgets Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Display-widgets Project records in CISA KEV

No Display-widgets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Display-widgets 1 record LOW

Records

1 record in Display-widgets · all components

TI-2015-07815 CVE-2015-9438 · GHSA-g865-qffp-7p34

The display-widgets plugin before 2.04 for WordPress has XSS via the…

Priority LOW 27

The display-widgets plugin before 2.04 for WordPress has XSS via the wp-admin/admin-ajax.php?action=dw_show_widget id_base, widget_number, or instance parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01044 Published 2019-09-26 No fix listed CWE-79
Open these records in search →