Michael Uno (miunosoft)

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Michael Uno (miunosoft) records in CISA KEV

No Michael Uno (miunosoft) vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Auto Amazon Links 3 records LOW Responsive Column Widgets 2 records LOW

Records

5 records

TI-2023-25691 CVE-2023-47520 · GHSA-qvq6-cfj7-3542

WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Michael Uno (miunosoft) Responsive Column Widgets plugin <= 1.2.7 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00412 Published 2023-11-14 No fix listed CWE-79

TI-2023-28603 CVE-2023-52175 · GHSA-p52j-m9w6-3m42

WordPress Auto Amazon Links Plugin <= 5.1.1 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Michael Uno (miunosoft) Auto Amazon Links – Amazon Associates Affiliate Plugin allows Stored XSS.This issue affects Au…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00337 Published 2024-02-01 No fix listed CWE-79

TI-2023-04137 CVE-2023-4482 · GHSA-5gfj-h4p7-f68x

Auto Amazon Links <= 5.3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via style

LOW 29

The Auto Amazon Links plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the style parameter in versions up to, and including, 5.3.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00374 Published 2023-10-20 No fix listed CWE-79

TI-2024-08673 CVE-2024-9349 · GHSA-r75g-vg6w-4m4h

Auto Amazon Links – Amazon Associates Affiliate Plugin <= 5.4.2 - Reflected Cross-Site Scripting

LOW 28

The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00425 Published 2024-10-04 No fix listed CWE-79

TI-2023-24536 CVE-2023-45762 · GHSA-3j5w-w68r-5fx9

WordPress Responsive Column Widgets Plugin <= 1.2.7 is vulnerable to Open Redirection

LOW 28

URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Michael Uno (miunosoft) Responsive Column Widgets.This issue affects Responsive Column Widgets: from n/a through 1.2.7.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00451 Published 2023-12-07 No fix listed CWE-601

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0