wpweaver

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wpweaver records in CISA KEV

No wpweaver vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Weaver Xtreme Theme Support 4 records HIGH Weaver Show Posts 1 record LOW Weaver Xtreme Theme 1 record LOW

Records

1 record in Weaver Show Posts · all components

TI-2023-01328 CVE-2023-1404 · GHSA-69mg-69f4-94mp

Weaver Show Posts <= 1.6 - Authenticated(Contributor+) Stored Cross-Site Scripting via Display Name

LOW 29

The Weaver Show Posts Plugin for WordPress is vulnerable to stored Cross-Site Scripting due to insufficient escaping of the profile display name in versions up to, and including, 1.6.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00508 Published 2023-06-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	10
Low	0
No CVSS	0