Web-Dorado

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Web-Dorado records in CISA KEV

No Web-Dorado vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web-dorado Spider Video Player 3 records LOW Contact Form Maker 2 records HIGH Event Calendar Wd 2 records LOW Form Maker 2 records MEDIUM Spidervplayer 2 records LOW Wd Instagram Feed 2 records LOW Wdsocialwidgets 2 records LOW Wp Form Builder 2 records MEDIUM

Records

2 records in Form Maker · all components

TI-2018-04360 CVE-2018-5991 · GHSA-h38h-j6rc-rjrh

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or…

MEDIUM 47

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-17 No fix listed CWE-89

TI-2018-07413 CVE-2018-10504 · GHSA-44gh-jrg2-9m35

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

MEDIUM 41

The WebDorado "Form Maker by WD" plugin before 1.12.24 for WordPress allows CSV injection.

CVSS 3.0HIGH 7.8 Local No auth User interaction EPSS 0.04422 Published 2018-04-27 No fix listed CWE-1236

Open these records in search →

Critical	4
High	12
Medium	13
Low	0
No CVSS	0