Read the docs

Wp Smiley Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wp Smiley Project records in CISA KEV

No Wp Smiley Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Wp Smiley · all components

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting (XSS) attacks via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01141 Published 2015-06-18 No fix listed CWE-352
Priority LOW 20

Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more parameter to wp-admin/optio…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01553 Published 2015-06-18 No fix listed CWE-79
Open these records in search →