Web-Settler

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Web-Settler records in CISA KEV

No Web-Settler vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Form Builder 3 records MEDIUM Layer Slider 3 records LOW Custom Login Page Styler 1 record LOW Image Social Feed 1 record LOW Social Feed 1 record LOW Social Feed | All Social Media In One Place 1 record LOW Testimonial Slider 1 record LOW

Records

1 record in Image Social Feed · all components

TI-2023-10034 CVE-2023-24412 · GHSA-g9w5-ww68-jfmw

WordPress Image Social Feed Plugin Plugin <= 1.7.6 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Web-Settler Image Social Feed plugin <= 1.7.6 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-09-01 No fix listed CWE-79

Open these records in search →