webfactory

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

webfactory records in CISA KEV

No webfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minimal Coming Soon & Maintenance Mode 5 records MEDIUM Wp Database Reset 3 records MEDIUM Wp Reset 3 records LOW 301 Redirects 2 records MEDIUM External Links In New Window / New Tab 2 records LOW Under Construction 2 records LOW Wp Login Lockdown 2 records LOW Wp Reset Pro 2 records MEDIUM

Records

2 records in External Links In New Window / New Tab · all components

TI-2022-01454 CVE-2022-1583 · GHSA-fh98-fx6f-2pf6

External Links in New Window / New Tab < 1.43 - Tabnabbing

LOW 32

The External Links in New Window / New Tab WordPress plugin before 1.43 does not ensure window.opener is set to "null" when links to external sites are clicked, which may enable tabnabbing attacks to occur.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01337 Published 2022-05-30 Fixed in 1.43 CWE-1022

TI-2022-01453 CVE-2022-1582 · GHSA-pgjp-w5pj-5rg7

External Links in New Window / New Tab < 1.43 - Unauthenticated Stored Cross-Site Scripting

LOW 29

The External Links in New Window / New Tab WordPress plugin before 1.43 does not properly escape URLs it concatenates to onclick event handlers, which makes Stored Cross-Site Scripting attacks possible.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-05-30 Fixed in 1.43 CWE-79

Open these records in search →

Critical	3
High	12
Medium	31
Low	0
No CVSS	0