Read the docs

PickPlugins

Records90All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

PickPlugins records in CISA KEV

No PickPlugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Grid 14 records MEDIUM Team Showcase 5 records MEDIUM Comboblocks 3 records LOW Post Grid Combo 3 records MEDIUM Product Slider For Woocommerce 3 records MEDIUM Accordion 2 records LOW Breadcrumb 1 record MEDIUM Pricing Table 1 record LOW

Records

5 records in Team Showcase · all components

TI-2020-18382 CVE-2020-35939 · GHSA-fwfq-c389-w955

PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for…

Priority MEDIUM 42

PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a rem…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2021-01-01 No fix listed CWE-502
TI-2020-18381 CVE-2020-35938 · GHSA-gpmw-c588-4p7h

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress…

Priority MEDIUM 42

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2021-01-01 No fix listed CWE-502
TI-2020-18380 CVE-2020-35937 · GHSA-p7xx-frqx-57x6

Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before…

Priority LOW 38

Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafte…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2021-01-01 No fix listed CWE-79
TI-2020-18379 CVE-2020-35936 · GHSA-f73m-j2hx-pp49

Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73…

Priority LOW 38

Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted pay…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2021-01-01 No fix listed CWE-79
Open these records in search →