Read the docs

Mediaburst

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Mediaburst records in CISA KEV

No Mediaburst vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gravity Forms 3 records MEDIUM Clockwork Sms Notfications 2 records LOW Booking Calendar 1 record LOW Booking Calendar Sms 1 record LOW Contact Form 7 - Clockwork Sms 1 record LOW Contact Form 7 Sms 1 record LOW Fast Secure Contact Form Sms 1 record LOW Formidable 1 record LOW

Records

6 records

TI-2023-02529 CVE-2023-2701 · GHSA-265v-54qj-mvh8

Gravity Forms < 2.7.5 - Reflected XSS

Priority MEDIUM 60

The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as adm…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00486 Published 2023-07-17 Fixed in 2.7.5
TI-2023-27748 CVE-2023-50843 · GHSA-5j49-8vfq-6j67

WordPress Clockwork SMS Notfications Plugin <= 3.0.4 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00529 Published 2023-12-28 No fix listed CWE-89
Open these records in search →