Read the docs

Riverforest-wp

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Riverforest-wp records in CISA KEV

No Riverforest-wp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Blog Card 2 records MEDIUM All Users Messenger 1 record MEDIUM Media From Ftp 1 record HIGH

Records

2 records in Simple Blog Card · all components

TI-2023-03744 CVE-2023-4035 · GHSA-8hw5-9v34-vmg4

Simple Blog Card < 1.31 - Contributor+ Stored XSS via Shortcode

Priority MEDIUM 58

The Simple Blog Card WordPress plugin before 1.31 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00433 Published 2023-08-30 Fixed in 1.31
TI-2023-03745 CVE-2023-4036 · GHSA-j874-rmjf-2w72

Simple Blog Card < 1.32 - Subscriber+ Arbitrary Post Access

Priority MEDIUM 53

The Simple Blog Card WordPress plugin before 1.32 does not ensure that posts to be displayed via a shortcode are public, allowing any authenticated users, such as subscriber, to retrieve arbitrary post title and their co…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00553 Published 2023-08-30 Fixed in 1.32
Open these records in search →