Read the docs

solidres

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

solidres records in CISA KEV

No solidres vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Solidres 4 records MEDIUM

Records

4 records in Solidres · all components

TI-2024-12372 CVE-2024-13329 · GHSA-j6vh-r2v3-c7fp

Solidres <= 0.9.4 - Reflected XSS

Priority MEDIUM 64

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users suc…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00306 Published 2025-02-04 No fix listed CWE-79
TI-2023-01301 CVE-2023-1377 · GHSA-243v-xr6m-2w5j

Solidres <= 0.9.4 - Multiple Reflected XSS

Priority MEDIUM 60

The Solidres WordPress plugin through 0.9.4 does not sanitise and escape numerous parameter before outputting them back in pages, leading to Reflected Cross-Site Scripting which could be used against high privilege users…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-04-03 No fix listed
TI-2023-01299 CVE-2023-1374 · GHSA-pv8p-73f5-h425

Solidres <= 0.9.4 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 23

The Solidres plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'currency_name' parameter in versions up to, and including, 0.9.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00612 Published 2023-03-13 No fix listed CWE-79
Open these records in search →