Read the docs

magazine3

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

magazine3 records in CISA KEV

No magazine3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pwa For Wp & Amp 4 records MEDIUM Schema & Structured Data For Wp & Amp 4 records LOW Amp For Wp 3 records LOW Easy Table Of Contents 3 records MEDIUM Core Web Vitals & Pagespeed Booster 1 record LOW Web Stories Enhancer 1 record LOW

Records

3 records in Easy Table Of Contents · all components

TI-2024-05177 CVE-2024-5573 · GHSA-2347-3mgh-xw2g

Easy Table of Contents < 2.0.66 - Admin+ Stored XSS

Priority MEDIUM 60

The Easy Table of Contents WordPress plugin before 2.0.66 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfilt…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00329 Published 2024-06-26 Fixed in 2.0.66 CWE-79
TI-2024-06561 CVE-2024-7082 · GHSA-fhmm-33rx-rqfp

easy-table-of-contents < 2.0.68 - Editor+ Stored XSS

Priority LOW 27

The Easy Table of Contents WordPress plugin before 2.0.68 does not sanitise and escape some parameters, which could allow users with a role as low as Editor to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00407 Published 2024-08-06 Fixed in 2.0.68 CWE-79
TI-2024-05878 CVE-2024-6334 · GHSA-f4jx-rpw7-5p2c

Easy Table of Contents < 2.0.67 - Editor+ Stored XSS

Priority LOW 27

The Easy Table of Contents WordPress plugin before 2.0.67.1 does not sanitise and escape some of its settings, which could allow high privilege users such as editors to perform Cross-Site Scripting attacks even when unfi…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00393 Published 2024-07-09 Fixed in 2.0.67.1 CWE-79
Open these records in search →