Ovation

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Ovation records in CISA KEV

No Ovation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dynamic Content 1 record LOW Dynamic Content For Elementor 1 record LOW Findme 1 record LOW

Records

3 records

TI-2023-28587 CVE-2023-52150 · GHSA-6j5w-7jm2-g5c8

WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Ovation S.R.L.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00274 Published 2024-01-05 Fixed in 2.12.5 CWE-352

TI-2018-11325 CVE-2018-15885 · GHSA-4pg5-xwrq-h998

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from…

LOW 35

Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01208 Published 2018-08-26 No fix listed CWE-20

TI-2021-02329 CVE-2021-3327 · GHSA-jxhm-wpfx-x3c2

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter.

LOW 25

Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00656 Published 2021-03-19 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0