Read the docs

Etoile Web Design

Records32All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high11CVSS 7.0–8.9

Exploited now

Etoile Web Design records in CISA KEV

No Etoile Web Design vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Front End Users 10 records HIGH Ultimate Faq 5 records MEDIUM Ultimate Product Catalog 4 records MEDIUM Order Tracking 3 records LOW Ultimate Reviews 3 records MEDIUM Ultimate Appointment Booking & Scheduling 1 record LOW

Records

3 records in Ultimate Reviews · all components

TI-2020-18897 CVE-2020-36726 · GHSA-p7jf-6m2v-3ffq

Ultimate Reviews < 2.1.33 - PHP Object Injection

Priority MEDIUM 52

The Ultimate Reviews plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 2.1.32 via deserialization of untrusted input in several vulnerable functions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01553 Published 2023-06-07 Fixed in 2.1.33 CWE-502
TI-2024-16825 CVE-2024-25597 · GHSA-q7vp-g92j-c6ph

WordPress Ultimate Reviews plugin <= 3.2.8 - Unauthenticated Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Etoile Web Design Ultimate Reviews allows Stored XSS.This issue affects Ultimate Reviews: from n/a through 3.2.8.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00375 Published 2024-03-15 No fix listed CWE-79
Open these records in search →