Elfden

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Elfden records in CISA KEV

No Elfden vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Eshop Plugin 2 records MEDIUM

Records

2 records

TI-2016-00688 CVE-2016-0769 · GHSA-xrmm-q45r-f6gr

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for…

MEDIUM 43

Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02894 Published 2017-01-23 No fix listed CWE-89

TI-2016-00684 CVE-2016-0765 · GHSA-2q69-vjhx-9vhf

Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop…

LOW 31

Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) action parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01838 Published 2017-01-23 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0