Read the docs

Web-Dorado

Records29All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

Web-Dorado records in CISA KEV

No Web-Dorado vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Web-dorado Spider Video Player 3 records LOW Contact Form Maker 2 records HIGH Event Calendar Wd 2 records LOW Form Maker 2 records MEDIUM Spidervplayer 2 records LOW Wd Instagram Feed 2 records LOW Wdsocialwidgets 2 records LOW Wp Form Builder 2 records MEDIUM

Records

2 records in Wp Form Builder · all components

TI-2019-08639 CVE-2019-11557 · GHSA-7jqc-c63x-gf5w

The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the…

Priority MEDIUM 40

The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via directory traversal, because there can be a disc…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01058 Published 2019-04-26 No fix listed CWE-22
TI-2023-04648 CVE-2023-5048 · GHSA-3fv9-369c-hj45

WDContactFormBuilder <= 1.0.72 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The WDContactFormBuilder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Contact_Form_Builder' shortcode in versions up to, and including, 1.0.72 due to insufficient input sanitization and outp…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00455 Published 2023-11-22 No fix listed CWE-79
Open these records in search →