Etsy Shop Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Etsy Shop Project records in CISA KEV

No Etsy Shop Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Etsy Shop 2 records MEDIUM

Records

2 records

TI-2023-11220 CVE-2023-25975 · GHSA-jf3w-9p2p-g3xg

WordPress Etsy Shop Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Frédéric Sheedy Etsy Shop plugin <= 3.0.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00321 Published 2023-11-09 No fix listed CWE-352

TI-2023-05035 CVE-2023-5470 · GHSA-hh2j-wjqr-83pc

Etsy Shop <= 3.0.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The Etsy Shop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'etsy-shop' shortcode in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping on user supplie…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00536 Published 2023-10-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0