plumwd

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

plumwd records in CISA KEV

No plumwd vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-17327 CVE-2025-23560 · GHSA-8c7w-3jg7-8g56

WordPress Web Testimonials plugin <= 1.2 - CSRF to Stored XSS vulnerability

LOW 31

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Web Testimonials web-testimonials allows Stored XSS.This issue affects Web Testimonials: from n/a through <= 1.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00211 Published 2025-01-16 No fix listed CWE-352

TI-2025-33280 CVE-2025-53313 · GHSA-4w32-4qfw-ph73

WordPress Twitch TV Embed Suite plugin <= 2.1.0 - Cross Site Request Forgery (CSRF) Vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Twitch TV Embed Suite twitch-tv-embed-suite allows Stored XSS.This issue affects Twitch TV Embed Suite: from n/a through <= 2.1.0.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00123 Published 2025-06-27 No fix listed CWE-352

TI-2024-35927 CVE-2024-53729 · GHSA-vw9h-3h3h-jf8m

WordPress Blizzard Quotes plugin <= 1.3 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

LOW 30

Cross-Site Request Forgery (CSRF) vulnerability in plumwd Blizzard Quotes blizzard-quotes allows Stored XSS.This issue affects Blizzard Quotes: from n/a through <= 1.3.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00159 Published 2024-12-02 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	0
Low	0
No CVSS	0