Vendors / SedLex Records 8 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 3
Exploited now SedLex records in CISA KEV No SedLex vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 62
Missing Authorization vulnerability in SedLex Image Zoom.This issue affects Image Zoom: from n/a through 1.8.8.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00364 · Published 2024-01-17 · No fix listed CWE-862
Priority MEDIUM 41
The Simple Quotation WordPress plugin through 1.3.2 does not have authorisation (and CSRF) checks in various of its AJAX actions and is lacking escaping of user data when using it in SQL statements, allowing any authenti…
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01318 · Published 2022-03-14 · No fix listed CWE-89
Priority LOW 38
Cross-Site Request Forgery (CSRF) vulnerability Backup Scheduler plugin <= 1.5.13 at WordPress.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00434 · Published 2022-09-23 · No fix listed CWE-352
Priority LOW 31
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Sed Lex Pages Order pages-order allows Reflected XSS.This issue affects Pages Order: from n/a through <= 1.1.3.
CVSS 3.1 HIGH 7.1· Network · No auth · User interaction · EPSS 0.00393 · Published 2025-04-01 · No fix listed CWE-79
Priority LOW 30
Broken Access Control vulnerability leading to Stored Cross-Site Scripting (XSS) in Traffic Manager plugin <= 1.4.5 on WordPress.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · User interaction · EPSS 0.00538 · Published 2022-11-10 · No fix listed CWE-264
Priority LOW 29
Missing Authorization vulnerability in SedLex Traffic Manager.This issue affects Traffic Manager: from n/a through 1.4.5.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.00369 · Published 2024-01-17 · No fix listed CWE-862
Priority LOW 29
The Simple Quotation WordPress plugin through 1.3.2 does not have CSRF check when creating or editing a quote and does not sanitise and escape Quotes.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.008 · Published 2022-03-14 · No fix listed CWE-116
Priority LOW 24
Cross-Site Request Forgery (CSRF) vulnerability in SedLex FavIcon Switcher plugin <= 1.2.11 at WordPress allows plugin settings change.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · No interaction · EPSS 0.00308 · Published 2022-09-21 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 3 5 0 0
THREATIST.IORead the docs