SecondLineThemes

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

SecondLineThemes records in CISA KEV

No SecondLineThemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Podcast Subscribe Buttons 2 records LOW Auto Youtube Importer 1 record LOW Podcast Importer Secondline 1 record LOW

Records

1 record in Podcast Importer Secondline · all components

TI-2022-00921 CVE-2022-1023 · GHSA-5qj4-c6xg-8vx4

Podcast Importer SecondLine < 1.3.8 - Admin+ SQLi

LOW 35

The Podcast Importer SecondLine WordPress plugin before 1.3.8 does not sanitise and properly escape some imported data, which could allow SQL injection attacks to be performed by imported a malicious podcast file

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01484 Published 2022-04-11 Fixed in 1.3.8 CWE-89

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0