Read the docs

Gwolle Guestbook Project

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Gwolle Guestbook Project records in CISA KEV

No Gwolle Guestbook Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gwolle Guestbook 4 records HIGH

Records

4 records

TI-2015-06873 CVE-2015-8351 · GHSA-59v2-j7v3-6gmx

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for…

Priority HIGH 65

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin before 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspa…

CVSS 3.0CRITICAL 9.0 Network No auth No interaction EPSS 0.37032 Published 2017-09-11 No fix listed CWE-94
TI-2017-14155 CVE-2017-20089 · GHSA-grmq-8wh7-vqvm

Gwolle Guestbook Plugin cross site scriting

Priority MEDIUM 60

A vulnerability was found in Gwolle Guestbook Plugin 1.7.4.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0073 Published 2022-06-23 No fix listed CWE-80
TI-2021-07259 CVE-2021-24980 · GHSA-jh4v-x3g4-f2hj

Gwolle Guestbook < 4.2.0 - Reflected Cross-Site Scripting

Priority LOW 29

The Gwolle Guestbook WordPress plugin before 4.2.0 does not sanitise and escape the gwolle_gb_user_email parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue in an admin…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-27 Fixed in 4.2.0 CWE-79
Open these records in search →