Read the docs

infornweb

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

infornweb records in CISA KEV

No infornweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Logo Showcase With Slick Slider 3 records LOW News & Blog Designer Pack 2 records MEDIUM Post Slider And Post Carousel 1 record MEDIUM Posts List Designer 1 record MEDIUM Posts List Designer By Category 1 record LOW

Records

2 records in News & Blog Designer Pack · all components

TI-2022-04388 CVE-2022-4792 · GHSA-w599-8q9r-3vg8

News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting att…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00438 Published 2023-01-30 Fixed in 3.3
TI-2023-05351 CVE-2023-5815 · GHSA-22hm-rh6h-j388

News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code…

Priority MEDIUM 51

The News & Blog Designer Pack – WordPress Blog Plugin — (Blog Post Grid, Blog Post Slider, Blog Post Carousel, Blog Post Ticker, Blog Post Masonry) plugin for WordPress is vulnerable to Remote Code Execution via Local Fi…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0502 Published 2023-11-22 No fix listed CWE-98
Open these records in search →