Read the docs

Twinpictures

Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Twinpictures records in CISA KEV

No Twinpictures vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Annual Archive 2 records MEDIUM Collapse-o-matic 2 records MEDIUM Jquery T(-) Countdown Widget 1 record MEDIUM

Records

2 records in Annual Archive · all components

TI-2023-00172 CVE-2023-0178 · GHSA-83hr-hwqh-94w5

Annual Archive < 1.6.0 - Contributor+ Stored XSS

Priority MEDIUM 58

The Annual Archive WordPress plugin before 1.6.0 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the con…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00573 Published 2023-02-06 Fixed in 1.6.0
TI-2023-27251 CVE-2023-49847 · GHSA-wpp8-597g-3fg4

WordPress Annual Archive Plugin <= 1.6.0 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Twinpictures Annual Archive allows Stored XSS.This issue affects Annual Archive: from n/a through 1.6.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00385 Published 2023-12-14 No fix listed CWE-79
Open these records in search →