Vendors / Wp-d3 Project Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Wp-d3 Project records in CISA KEV No Wp-d3 Project vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 58
The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor…
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00444 · Published 2023-05-08 · No fix listed
Priority LOW 39
The wp-d3 plugin before 2.4.1 for WordPress has CSRF.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00781 · Published 2019-09-13 · No fix listed CWE-352
Open these records in search → All records by CVSS severity
0 1 1 0 0
