Wp-kama

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Wp-kama records in CISA KEV

No Wp-kama vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

5 records

TI-2017-14169 CVE-2017-20103 · GHSA-283c-28ph-cjjp

HIGH 71

A vulnerability classified as critical has been found in Kama Click Counter Plugin up to 3.4.8.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0098 Published 2022-06-27 No fix listed CWE-89

TI-2017-13787 CVE-2017-18614 · GHSA-5hw9-5r55-6v6g

LOW 39

The kama-clic-counter plugin 3.4.9 for WordPress has SQL injection via the admin.php order parameter.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0201 Published 2019-09-13 No fix listed CWE-89

TI-2017-13694 CVE-2017-18521 · GHSA-43h4-6rw5-hg63

LOW 39

The democracy-poll plugin before 5.4 for WordPress has CSRF via wp-admin/options-general.php?page=democracy-poll&subpage=l10n.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00739 Published 2019-08-21 No fix listed CWE-352

TI-2017-13788 CVE-2017-18615 · GHSA-5q5h-g93j-vx2v

LOW 29

The kama-clic-counter plugin before 3.5.0 for WordPress has XSS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00914 Published 2019-09-13 No fix listed CWE-79

TI-2017-13693 CVE-2017-18520 · GHSA-f4f3-43h7-qhj4

LOW 29

The democracy-poll plugin before 5.4 for WordPress has XSS via update_l10n in admin/class.DemAdminInit.php.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00914 Published 2019-08-20 No fix listed CWE-79