Web-Dorado

Records29All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Web-Dorado records in CISA KEV

No Web-Dorado vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Web-dorado Spider Video Player 3 records LOW Contact Form Maker 2 records HIGH Event Calendar Wd 2 records LOW Form Maker 2 records MEDIUM Spidervplayer 2 records LOW Wd Instagram Feed 2 records LOW Wdsocialwidgets 2 records LOW Wp Form Builder 2 records MEDIUM

Records

2 records in Spidervplayer · all components

TI-2023-24433 CVE-2023-45632 · GHSA-vcrv-8fh9-j64x

WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-18 No fix listed CWE-79

TI-2023-26183 CVE-2023-48320 · GHSA-7mpm-45vm-v7fc

WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-11-30 No fix listed CWE-79

Open these records in search →

Critical	4
High	12
Medium	13
Low	0
No CVSS	0