Najeebmedia

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical7CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Najeebmedia records in CISA KEV

No Najeebmedia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Frontend File Manager Plugin 10 records MEDIUM Frontend File Manager 4 records HIGH Comments Extra Fields For Post, Pages And Cpt 2 records LOW Memberhero 2 records MEDIUM Ppom For Woocommerce 2 records LOW Easy Quiz Maker 1 record LOW N-media File Uploader 1 record LOW Personalized Woocommerce Cart Page 1 record MEDIUM

Records

2 records in Ppom For Woocommerce · all components

TI-2019-11146 CVE-2019-14948 · GHSA-86qj-fcw2-crg7

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

LOW 26

The woocommerce-product-addon plugin before 18.4 for WordPress has XSS via an import of a new meta data structure.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0104 Published 2019-08-12 No fix listed CWE-79

TI-2021-07296 CVE-2021-25018 · GHSA-gvfj-h2wq-cw77

PPOM for WooCommerce < 24.0 - Subscriber+ Settings Update to Stored XSS

LOW 25

The PPOM for WooCommerce WordPress plugin before 24.0 does not have authorisation and CSRF checks in the ppom_settings_panel_action AJAX action, allowing any authenticated to call it and set arbitrary settings.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00524 Published 2022-02-14 Fixed in 24.0 CWE-862

Open these records in search →

Critical	7
High	5
Medium	14
Low	0
No CVSS	0