Vendors / Fullworks Records 25 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 4
Exploited now Fullworks records in CISA KEV No Fullworks vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
The Quick Paypal Payments WordPress plugin before 5.7.26.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.0047 · Published 2023-05-02 · Fixed in 5.7.26.4 CWE-79
Priority LOW 31
Unauth. Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00406 · Published 2023-04-07 · No fix listed CWE-79
Priority LOW 29
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00361 · Published 2023-04-25 · No fix listed CWE-79
Priority LOW 27
Auth. (admin+) Stored Cross-site Scripting (XSS) vulnerability in Fullworks Quick Paypal Payments plugin <= 5.7.25 versions.
CVSS 3.1 MEDIUM 5.9· Network · High privileges · User interaction · EPSS 0.00392 · Published 2023-04-07 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 4 21 0 0
THREATIST.IORead the docs