Read the docs

MotoPress

Records26All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

MotoPress records in CISA KEV

No MotoPress vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Getwid 10 records HIGH Timetable And Event Schedule 7 records MEDIUM Hotel Booking Lite 2 records MEDIUM Jetblocks For Elementor 1 record LOW Motopress-slider-lite 1 record LOW Restaurant Menu 1 record LOW Stratum 1 record LOW

Records

10 records in Getwid · all components

TI-2024-03344 CVE-2024-3588 · GHSA-pj7c-pvg3-fjr7

Getwid – Gutenberg Blocks <= 2.0.7 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via 'Countdown'

Priority LOW 29

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's Countdown block in all versions up to, and including, 2.0.7 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00535 Published 2024-05-02 No fix listed CWE-79
TI-2024-01814 CVE-2024-1948 · GHSA-47mh-5593-5c2x

Getwid – Gutenberg Blocks <= 2.0.5 - Authenticated(Contributor+) Stored Cross-Site Scripting via Block Content

Priority LOW 29

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the block content in all versions up to, and including, 2.0.5 due to insufficient input sanitization and output escaping…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00399 Published 2024-04-09 No fix listed CWE-79
TI-2024-10078 CVE-2024-10872 · GHSA-xwgw-3mc5-w4qf

Getwid – Gutenberg Blocks <= 2.0.12 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `template-post-custom-field` block in all versions up to, and including, 2.0.12 due to insufficient input sanitizati…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00333 Published 2024-11-20 No fix listed CWE-79
TI-2023-06365 CVE-2023-6963 · GHSA-h2p5-5xgm-h7m9

Getwid – Gutenberg Blocks <= 2.0.4 - Captcha Bypass

Priority LOW 25

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to CAPTCHA Bypass in versions up to, and including, 2.0.4.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0053 Published 2024-02-05 No fix listed CWE-804
TI-2023-01795 CVE-2023-1910 · GHSA-6r4r-m3h4-xrhw

Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint

Priority LOW 21

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote_templates function in versions up to, and including, 1.8.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00515 Published 2023-06-09 No fix listed CWE-285
TI-2024-06020 CVE-2024-6491 · GHSA-xfrr-5gq4-4j32

Getwid – Gutenberg Blocks <= 2.0.10 - Missing Authentication to MailChimp API key update

Priority LOW 20

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the mailchimp_api_key_manage function in all versions up to, and including, 2.0.1…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00378 Published 2024-07-20 No fix listed CWE-862
TI-2023-06361 CVE-2023-6959 · GHSA-5qw4-2v86-45mw

Getwid – Gutenberg Blocks <= 2.0.4 - Missing Authorization to Recaptcha API Key Modification

Priority LOW 20

The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the recaptcha_api_key_manage function in all versions up to, and including, 2.0.3…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00424 Published 2024-02-05 No fix listed CWE-862
Open these records in search →