Read the docs

Popozure

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Popozure records in CISA KEV

No Popozure vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Pz-linkcard 5 records MEDIUM

Records

5 records

TI-2024-00619 CVE-2024-0672 · GHSA-5w42-fg4v-hv3r

Pz-LinkCard <= 2.5.1 - Reflected XSS

Priority MEDIUM 64

The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00491 Published 2024-03-28 No fix listed CWE-79
TI-2024-00620 CVE-2024-0673 · GHSA-fpr2-hvvq-5xh8

Pz-LinkCard <= 2.5.1 - Admin+ Stored XSS

Priority MEDIUM 60

The Pz-LinkCard WordPress plugin through 2.5.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00467 Published 2024-03-28 No fix listed CWE-79
TI-2024-00624 CVE-2024-0677 · GHSA-9q54-pg8p-25cg

Pz-LinkCard <= 2.5.1 - Contributor+ SSRF

Priority MEDIUM 56

The Pz-LinkCard WordPress plugin through 2.5.1 does not prevent users from pinging arbitrary hosts via some of its shortcodes, which could allow high privilege users such as contributors to perform SSRF attacks.

CVSS 3.1MEDIUM 5.1 Local High privileges No interaction EPSS 0.00263 Published 2024-03-28 No fix listed CWE-918
TI-2021-07290 CVE-2021-25012 · GHSA-8xqr-mvwg-chr4

Pz-LinkCard <= 2.4.4.4 - Reflected Cross-Site Scripting

Priority LOW 29

The Pz-LinkCard WordPress plugin through 2.4.4.4 does not sanitise and escape multiple parameters before outputting them back in admin dashboard pages, leading to Reflected Cross-Site Scripting issues

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-03-28 No fix listed CWE-79
Open these records in search →