Vendors / Followmedarling Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 1 CVSS 7.0–8.9
Exploited now Followmedarling records in CISA KEV No Followmedarling vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Records 2 records in Spotify-play-button-for-wordpress · all components
Priority LOW 29
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Jonk @ Follow me Darling Sp*tify Play Button for WordPress plugin <= 2.05 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.0037 · Published 2023-04-05 · No fix listed CWE-79
Priority LOW 22
The Sp*tify Play Button for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in versions up to, and including, 2.07 due to insufficient input sanitization and output escaping…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00352 · Published 2023-04-04 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High1 Medium3 Low0 No CVSS0