Read the docs

nik00726

Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

nik00726 records in CISA KEV

No nik00726 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Subscription Popup 5 records MEDIUM Thumbnail Carousel Slider 5 records MEDIUM Thumbnail Slider With Lightbox 4 records MEDIUM Video Carousel Slider With Lightbox 4 records LOW Easy Testimonial Slider And Form 3 records LOW Team Circle Image Slider With Lightbox 3 records LOW Photo Gallery Slideshow & Masonry Tiled Gallery 2 records LOW Responsive Filterable Portfolio 2 records LOW

Records

5 records in Email Subscription Popup · all components

TI-2023-06006 CVE-2023-6555 · GHSA-fwrh-jr8g-7mf2

Email Subscription Popup < 1.2.20 - Reflected XSS

Priority MEDIUM 60

The Email Subscription Popup WordPress plugin before 1.2.20 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high pri…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00442 Published 2024-01-08 Fixed in 1.2.20 CWE-79
TI-2024-18563 CVE-2024-27960 · GHSA-4p64-mr2w-44cv

WordPress Email Subscription Popup plugin <= 1.2.20 - Cross Site Scripting (XSS) vulnerability

Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in I Thirteen Web Solution Email Subscription Popup allows Stored XSS.This issue affects Email Subscription Popup: from n…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00331 Published 2024-03-17 No fix listed CWE-79
TI-2024-10369 CVE-2024-11195 · GHSA-2m96-99w5-8w8h

Cross-site scripting in nik00726 Email Subscription Popup

Priority LOW 29

The Email Subscription Popup plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's print_email_subscribe_form shortcode in all versions up to, and including, 1.2.22 due to insufficient input…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.0037 Published 2024-11-19 No fix listed CWE-79
TI-2023-05982 CVE-2023-6527 · GHSA-fv9g-wpxr-g2cq

Email Subscription Popup <= 1.2.18 - Reflected Cross-Site Scripting

Priority LOW 27

The Email Subscription Popup plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the HTTP_REFERER header in all versions up to, and including, 1.2.18 due to insufficient input sanitization and output…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00374 Published 2023-12-06 No fix listed CWE-79
Open these records in search →