TI-2015-08028 CVE-2015-10100 · GHSA-587p-pvvj-3ghc
Dynamic Widgets Plugin dynwid_class.php sql injection
Priority MEDIUM 44
A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress.
Vivwebsolutions
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Vivwebsolutions records in CISA KEVNo Vivwebsolutions vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Dynamic Widgets · all components
TI-2024-34583 CVE-2024-51669 · GHSA-mp9m-637r-pmhw
WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 37
Cross-Site Request Forgery (CSRF) vulnerability in Kalmang Dynamic Widgets dynamic-widgets.This issue affects Dynamic Widgets: from n/a through <= 1.6.4.
TI-2015-07814 CVE-2015-9437 · GHSA-xf27-2797-g5jw
The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via…
Priority LOW 31
The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
TI-2015-07813 CVE-2015-9436 · GHSA-f3rf-2wrm-7mv6
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the…
Priority LOW 27
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.