WebDorado

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

WebDorado records in CISA KEV

No WebDorado vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Spider Video Player 1 record MEDIUM

Records

6 records

TI-2013-03089 CVE-2013-3532 · GHSA-pv4v-x6g5-c665

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin…

MEDIUM 41

SQL injection vulnerability in settings.php in the Web Dorado Spider Video Player plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the theme parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.05395 Published 2013-05-10 No fix listed CWE-89

TI-2023-25121 CVE-2023-46619 · GHSA-jfv3-2638-xrwh

WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in WebDorado WDSocialWidgets plugin <= 1.0.15 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00303 Published 2023-11-13 No fix listed CWE-352

TI-2024-20512 CVE-2024-31123 · GHSA-4gqq-h677-5fmh

WordPress SpiderFAQ plugin <= 1.3.2 - Cross Site Scripting vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderFAQ allows Reflected XSS.This issue affects SpiderFAQ: from n/a through 1.3.2.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00354 Published 2024-03-31 No fix listed CWE-79

TI-2023-24743 CVE-2023-46090 · GHSA-mjmh-7vcm-fvhq

WordPress Spider Facebook Plugin <= 1.0.15 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado WDSocialWidgets plugin <= 1.0.15 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00374 Published 2023-10-26 No fix listed CWE-79

TI-2023-24433 CVE-2023-45632 · GHSA-vcrv-8fh9-j64x

WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

LOW 31

Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in WebDorado SpiderVPlayer plugin <= 1.5.22 versions.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00382 Published 2023-10-18 No fix listed CWE-79

TI-2023-26183 CVE-2023-48320 · GHSA-7mpm-45vm-v7fc

WordPress Video Player Plugin <= 1.5.22 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WebDorado SpiderVPlayer allows Stored XSS.This issue affects SpiderVPlayer: from n/a through 1.5.22.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-11-30 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	1
Low	0
No CVSS	0