Hamidrezasepehr

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Hamidrezasepehr records in CISA KEV

No Hamidrezasepehr vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Custom Cursors 1 record MEDIUM Wp Custom Cursors | Wordpress Cursor Plugin 1 record LOW

Records

2 records

TI-2023-16005 CVE-2023-32739 · GHSA-q4v4-5ph9-rrcc

WordPress WP Custom Cursors Plugin < 3.2 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in Web_Trendy WP Custom Cursors | WordPress Cursor Plugin plugin < 3.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2023-11-09 Fixed in 3.2 CWE-352

TI-2023-05443 CVE-2023-5911 · GHSA-rm8m-fq9m-823j

WP Custom Cursors <= 3.2 - Admin+ Stored XSS

LOW 22

The WP Custom Cursors | WordPress Cursor Plugin WordPress plugin through 3.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00335 Published 2024-01-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0