Read the docs

shapedplugin

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

shapedplugin records in CISA KEV

No shapedplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Tabs 5 records MEDIUM Product Slider For Woocommerce 3 records MEDIUM Smart Post Show 3 records MEDIUM Logo Carousel 2 records LOW Location Weather 1 record MEDIUM Real Testimonials 1 record MEDIUM Wp Carousel 1 record LOW

Records

2 records in Logo Carousel · all components

TI-2021-07021 CVE-2021-24739 · GHSA-25jm-89cm-8q44

Logo Carousel < 3.4.2 - Unauthorised Private Post Access

Priority LOW 37

The Logo Carousel WordPress plugin before 3.4.2 allows users with a role as low as Contributor to duplicate and view arbitrary private posts made by other users via the Carousel Duplication feature

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01039 Published 2021-12-21 Fixed in 3.4.2 CWE-639
TI-2021-07020 CVE-2021-24738 · GHSA-jm24-qrrg-77rv

Logo Carousel < 3.4.2 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Logo Carousel WordPress plugin before 3.4.2 does not validate and escape the "Logo Margin" carousel option, which could allow users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-12-21 Fixed in 3.4.2 CWE-79
Open these records in search →