Noorsplugin

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Noorsplugin records in CISA KEV

No Noorsplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Easy Video Player 2 records MEDIUM Wp Stripe Checkout 2 records MEDIUM Checkout For Paypal 1 record MEDIUM Responsive Lightbox2 1 record MEDIUM Wordpress Image Seo 1 record LOW

Records

2 records in Easy Video Player · all components

TI-2022-03610 CVE-2022-3937 · GHSA-28pc-7w77-pq29

Easy Video Player < 1.2.2.3 - Contributor+ Stored XSS

MEDIUM 58

The Easy Video Player WordPress plugin before 1.2.2.3 does not sanitize and escapes some parameters, which could allow users with a role as low as Contributor to perform Cross-Site Scripting attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00533 Published 2022-12-19 Fixed in 1.2.2.3

TI-2023-28335 CVE-2023-51689 · GHSA-xq9r-2r42-w9c6

WordPress Easy Video Player Plugin <= 1.2.2.10 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in naa986 Easy Video Player allows Stored XSS.This issue affects Easy Video Player: from n/a through 1.2.2.10.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00328 Published 2024-02-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	5
Low	0
No CVSS	0