Read the docs

WANotifier

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WANotifier records in CISA KEV

No WANotifier vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wanotifier 1 record MEDIUM

Records

1 record in Wanotifier · all components

TI-2024-05714 CVE-2024-6165 · GHSA-x99r-v22q-wv7v

WANotifier < 2.6.1 - Admin+ Stored XSS

Priority MEDIUM 55

The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00373 Published 2024-07-31 Fixed in 2.6.1 CWE-79
Open these records in search →