Easymodal Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Easymodal Project records in CISA KEV

No Easymodal Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Modal 2 records LOW

Records

2 records in Easy Modal · all components

TI-2017-09592 CVE-2017-12947 · GHSA-h548-mpc5-c65p

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress…

LOW 34

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in an untrash action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01262 Published 2017-08-18 No fix listed CWE-89

TI-2017-09591 CVE-2017-12946 · GHSA-3ppj-x7p7-vph2

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress…

LOW 34

classes\controller\admin\modals.php in the Easy Modal plugin before 2.1.0 for WordPress has SQL injection in a delete action with the id, ids, or modal parameter to wp-admin/admin.php, exploitable by administrators.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01262 Published 2017-08-18 No fix listed CWE-89

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0