Read the docs

shapedplugin

Records33All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

shapedplugin records in CISA KEV

No shapedplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Tabs 5 records MEDIUM Product Slider For Woocommerce 3 records MEDIUM Smart Post Show 3 records MEDIUM Logo Carousel 2 records LOW Location Weather 1 record MEDIUM Real Testimonials 1 record MEDIUM Wp Carousel 1 record LOW

Records

1 record in Real Testimonials · all components

TI-2022-04248 CVE-2022-4648 · GHSA-j35w-mpg6-43xp

Real Testimonials < 2.6.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Real Testimonials WordPress plugin before 2.6.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perf…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00476 Published 2023-01-16 Fixed in 2.6.0
Open these records in search →