obox

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

obox records in CISA KEV

No obox vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Launchpad - Coming Soon & Maintenance Mode Plugin 2 records LOW

Records

2 records

TI-2022-23198 CVE-2022-46854 · GHSA-2225-fj3w-f9wh

Cross-site request forgery in Obox Themes Launchpad – Coming Soon & Maintenance Mode…

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Obox Themes Launchpad – Coming Soon & Maintenance Mode plugin <= 1.0.13 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00264 Published 2023-03-17 No fix listed CWE-352

TI-2023-00280 CVE-2023-0295 · GHSA-mjp7-9x9w-g68j

Launchpad – Coming Soon & Maintenance Mode Plugin <= 1.0.13 - Authenticated (Administrator+) Cross-Site Scripting

LOW 26

The Launchpad plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several of its settings parameters in versions up to, and including, 1.0.13 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00561 Published 2023-01-13 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0