Read the docs

magazine3

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

magazine3 records in CISA KEV

No magazine3 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pwa For Wp & Amp 4 records MEDIUM Schema & Structured Data For Wp & Amp 4 records LOW Amp For Wp 3 records LOW Easy Table Of Contents 3 records MEDIUM Core Web Vitals & Pagespeed Booster 1 record LOW Web Stories Enhancer 1 record LOW

Records

4 records in Schema & Structured Data For Wp & Amp · all components

TI-2024-14747 CVE-2024-22146 · GHSA-87hh-r9jv-r2jq

WordPress Schema & Structured Data for WP & AMP Plugin <= 1.25 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Magazine3 Schema & Structured Data for WP & AMP allows Stored XSS.This issue affects Schema & Structured Data for WP &…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0034 Published 2024-01-31 No fix listed CWE-79
TI-2024-05186 CVE-2024-5582 · GHSA-7v6r-4575-fvg7

Cross-site scripting in magazine3 Schema & Structured Data for WP & AMP

Priority LOW 29

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'url' attribute within the Q&A Block widget in all versions up to, and including, 1.33 due to i…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00385 Published 2024-07-17 No fix listed CWE-79
TI-2024-01480 CVE-2024-1586 · GHSA-m4mh-4hxg-cj4m

Schema & Structured Data for WP & AMP <= 1.26 - Authenticated (Custom) Stored Cross-Site Scripting

Priority LOW 29

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the custom schema in all versions up to, and including, 1.26 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00372 Published 2024-02-20 No fix listed CWE-79
TI-2024-01198 CVE-2024-1288 · GHSA-v49v-4cf4-4q55

Schema & Structured Data for WP & AMP <= 1.26 - Missing Authorization to reCaptcha Key Modification

Priority LOW 20

The Schema & Structured Data for WP & AMP plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saswp_reviews_form_render' function in all versions up to, and i…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00431 Published 2024-02-20 No fix listed CWE-284
Open these records in search →