Wp-plugins

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Wp-plugins records in CISA KEV

No Wp-plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Secure Files 1 record MEDIUM The Hackers Diet 1 record LOW Video Popup 1 record LOW Wp-print 1 record LOW

Records

4 records

TI-2005-04625 CVE-2005-10002 · GHSA-8v2m-x872-56fc

almosteffortless secure-files Plugin secure-files.php sf_downloads path traversal

MEDIUM 44

A vulnerability, which was classified as critical, was found in almosteffortless secure-files Plugin up to 1.1 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00945 Published 2023-10-29 No fix listed CWE-22

TI-2007-06457 CVE-2007-10003 · GHSA-24m5-fqmm-mrmv

The Hackers Diet Plugin HTTP POST Request ajax_blurb.php sql injection

LOW 39

A vulnerability, which was classified as critical, has been found in The Hackers Diet Plugin up to 0.9.6b on WordPress.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00714 Published 2023-10-29 No fix listed CWE-89

TI-2013-02354 CVE-2013-2693 · GHSA-q39q-h3pm-87mq

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin…

LOW 32

Cross-site request forgery (CSRF) vulnerability in the Options in the WP-Print plugin before 2.52 for WordPress allows remote attackers to hijack the authentication of administrators for requests that manipulate plugin s…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01081 Published 2014-04-10 No fix listed CWE-352

TI-2023-04567 CVE-2023-4962 · GHSA-2227-26ff-8f7g

Video PopUp <= 1.1.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The Video PopUp plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'video_popup' shortcode in versions up to, and including, 1.1.3 due to insufficient input sanitization and output escaping on user sup…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00436 Published 2024-01-11 No fix listed CWE-79

Open these records in search →

Critical	1
High	1
Medium	2
Low	0
No CVSS	0