Read the docs

premio

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

premio records in CISA KEV

No premio vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Chaty 6 records HIGH My Sticky Bar 4 records MEDIUM Floating Chat Widget 3 records MEDIUM Folders 2 records MEDIUM My Sticky Elements 2 records HIGH Mystickymenu 2 records LOW Chaty Pro 1 record LOW Mystickyelements 1 record LOW

Records

2 records in My Sticky Elements · all components

TI-2023-00461 CVE-2023-0487 · GHSA-cw9g-hjgc-39f8

My Sticky Elements < 2.0.9 - Admin+ SQLi

Priority HIGH 67

The My Sticky Elements WordPress plugin before 2.0.9 does not properly sanitise and escape a parameter before using it in a SQL statement when deleting messages, leading to a SQL injection exploitable by high privilege u…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01482 Published 2023-02-27 Fixed in 2.0.9 CWE-89
TI-2023-03044 CVE-2023-3248 · GHSA-646r-w7g9-c4x4

All-in-one Floating Contact Form < 2.1.2 - Admin+ Stored Cross-Site Scripting

Priority MEDIUM 55

The All-in-one Floating Contact Form WordPress plugin before 2.1.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00477 Published 2023-07-24 Fixed in 2.1.2
Open these records in search →