Read the docs

webdzier

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

webdzier records in CISA KEV

No webdzier vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Button 1 record LOW Hotel Galaxy 1 record LOW

Records

3 records

TI-2024-10651 CVE-2024-11501 · GHSA-6w97-jr3c-q3h4

Gallery <= 1.3 - Authenticated (Contributor+) PHP Object Injection

Priority MEDIUM 41

The Gallery plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.3 via deserialization of untrusted input from wd_gallery_$id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00623 Published 2024-12-07 No fix listed CWE-502
TI-2024-29580 CVE-2024-43991 · GHSA-57j6-7wr5-vjfv

WordPress Hotel Galaxy theme <= 4.4.24 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in webdzier Hotel Galaxy allows Stored XSS.This issue affects Hotel Galaxy: from n/a through 4.4.24.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00288 Published 2024-09-17 No fix listed CWE-79
Open these records in search →