Joomlaserviceprovider

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Joomlaserviceprovider records in CISA KEV

No Joomlaserviceprovider vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Wsecure · all components

TI-2016-08998 CVE-2016-10960 · GHSA-683h-vphw-8g82

MEDIUM 49

The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.08738 Published 2019-09-16 No fix listed CWE-20

TI-2023-20879 CVE-2023-39987 · GHSA-mxgv-7vgm-fvf5

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-09-04 No fix listed CWE-79