devitemsllc

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high29CVSS 7.0–8.9

Exploited now

devitemsllc records in CISA KEV

No devitemsllc vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Ht Mega 30 records MEDIUM Shoplentor 19 records HIGH Woolentor - Woocommerce Elementor Addons + Builder 4 records LOW Download Contact Form 7 Widget For Elementor Page Builder & Gutenberg Blocks 3 records MEDIUM Extensions For Cf7 3 records LOW Wishsuite 3 records LOW Hashbar 2 records MEDIUM Ht Easy Ga4 (google Analytics 4) 2 records LOW

Records

3 records in Wishsuite · all components

TI-2023-09545 CVE-2023-23731 · GHSA-6v94-wxf8-92qh

WordPress WishSuite Plugin <= 1.3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-07-11 No fix listed CWE-352

TI-2024-19694 CVE-2024-29927 · GHSA-9h9v-3fff-x4pj

WordPress WishSuite plugin <= 1.3.7 - Cross Site Scripting (XSS) vulnerability

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTheme WishSuite allows Stored XSS.This issue affects WishSuite: from n/a through 1.3.7.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00336 Published 2024-03-27 No fix listed CWE-79

TI-2023-16150 CVE-2023-32962 · GHSA-c35r-c563-xx7p

WordPress WishSuite Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in HasTheme WishSuite – Wishlist for WooCommerce plugin <= 1.3.4 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-08-30 No fix listed CWE-79

Open these records in search →