Read the docs

Meks

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Meks records in CISA KEV

No Meks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Meks Easy Ads Widget 2 records LOW Meks Easy Photo Feed Widget 2 records LOW Meks Smart Author Widget 2 records LOW Meks Smart Social Widget 2 records LOW Meks Audio Player 1 record LOW Meks Easy Maps 1 record LOW Meks Easy Social Share 1 record MEDIUM Meks Flexible Shortcodes 1 record MEDIUM

Records

1 record in Meks Flexible Shortcodes · all components

TI-2022-04166 CVE-2022-4562 · GHSA-rcp4-35j5-3qcc

Meks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS

Priority MEDIUM 58

The Meks Flexible Shortcodes WordPress plugin before 1.3.5 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0054 Published 2023-02-13 Fixed in 1.3.5
Open these records in search →