Read the docs

Freebiesdownload

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Freebiesdownload records in CISA KEV

No Freebiesdownload vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pvn Auth Popup 2 records MEDIUM

Records

2 records

TI-2024-06226 CVE-2024-6718 · GHSA-8rhc-9wf9-c4f6

PVN Auth Popup <= 1.0.0 - Contributor+ XSS via Shortcode

Priority MEDIUM 58

The PVN Auth Popup WordPress plugin through 1.0.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00324 Published 2025-05-15 No fix listed CWE-79
TI-2024-06222 CVE-2024-6713 · GHSA-j7cm-jxq2-h8q5

PVN Auth Popup <= 1.0.0 - Admin+ Stored XSS

Priority MEDIUM 55

The PVN Auth Popup WordPress plugin through 1.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfil…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00331 Published 2025-05-15 No fix listed CWE-79
Open these records in search →