wc1c

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wc1c records in CISA KEV

No wc1c vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-10540 CVE-2024-11375 · GHSA-86qf-447q-2wv4

WC1C <= 0.23.0 - Reflected Cross-Site Scripting

LOW 27

The WC1C plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up to, and including, 0.23.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00356 Published 2025-01-07 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0