Read the docs

woobox

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

woobox records in CISA KEV

No woobox vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2025-30172 CVE-2025-47675 · GHSA-rcx8-5gmg-pvvp

WordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox woobox allows DOM-Based XSS.This issue affects Woobox: from n/a through <= 1.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-05-07 No fix listed CWE-79
TI-2025-30159 CVE-2025-47662 · GHSA-r62r-xg8x-42v8

WordPress Woobox plugin <= 1.6 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in woobox Woobox woobox allows Stored XSS.This issue affects Woobox: from n/a through <= 1.6.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00222 Published 2025-05-07 No fix listed CWE-79
Open these records in search →