Read the docs

stellarwp

Records143All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical14CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

stellarwp records in CISA KEV

No stellarwp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
The Events Calendar 9 records HIGH Image Widget 1 record MEDIUM

Records

1 record in Image Widget · all components

TI-2024-10140 CVE-2024-10939 · GHSA-vvvx-g9vg-6c4g

Image Widget < 4.4.11 - Admin+ Stored XSS

Priority MEDIUM 55

The Image Widget WordPress plugin before 4.4.11 does not sanitise and escape some of its Image Widget settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even whe…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2024-12-13 Fixed in 4.4.11 CWE-79
Open these records in search →