wonderplugin

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

wonderplugin records in CISA KEV

No wonderplugin vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Audio Player 1 record LOW Wonder Pdf Embed 1 record LOW Wonder Slider Lite 1 record LOW Wonder Video Embed 1 record LOW

Records

1 record in Wonder Pdf Embed · all components

TI-2021-06827 CVE-2021-24541 · GHSA-43h7-jcr7-fh3r

Wonder PDF Embed < 1.7 - Contributor+ Stored XSS

LOW 25

The Wonder PDF Embed WordPress plugin before 1.7 does not escape parameters of its wonderplugin_pdf shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-08-16 Fixed in 1.7 CWE-79

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0