ExactMetrics

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

ExactMetrics records in CISA KEV

No ExactMetrics vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Exactmetrics 1 record MEDIUM

Records

2 records

TI-2023-00078 CVE-2023-0082 · GHSA-886q-j9q2-5q25

ExactMetrics < 7.12.1 - Contributor+ Stored XSS

MEDIUM 58

The ExactMetrics WordPress plugin before 7.12.1 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor rol…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 7.12.1

TI-2023-09679 CVE-2023-23880 · GHSA-xxhj-whx7-2xjg

WordPress ExactMetrics Plugin <= 7.14.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in ExactMetrics plugin <= 7.14.1 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00387 Published 2023-08-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0