Read the docs

Meks

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Meks records in CISA KEV

No Meks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Meks Easy Ads Widget 2 records LOW Meks Easy Photo Feed Widget 2 records LOW Meks Smart Author Widget 2 records LOW Meks Smart Social Widget 2 records LOW Meks Audio Player 1 record LOW Meks Easy Maps 1 record LOW Meks Easy Social Share 1 record MEDIUM Meks Flexible Shortcodes 1 record MEDIUM

Records

2 records in Meks Easy Photo Feed Widget · all components

TI-2023-11234 CVE-2023-25989 · GHSA-m9vg-3mw3-9gwh

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00444 Published 2023-10-03 No fix listed CWE-352
TI-2021-07237 CVE-2021-24958 · GHSA-gjrp-2m36-6xcw

Meks Easy Photo Feed Widget < 1.2.4 - Subscriber+ Settings Update to Stored XSS

Priority LOW 25

The Meks Easy Photo Feed Widget WordPress plugin before 1.2.4 does not have capability and CSRF checks in the meks_save_business_selected_account AJAX action, available to any authenticated user, and does not escape some…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-03-14 Fixed in 1.2.4 CWE-79
Open these records in search →