Read the docs

Wpb Show Core Project

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wpb Show Core Project records in CISA KEV

No Wpb Show Core Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wpb Show Core 6 records HIGH

Records

6 records in Wpb Show Core · all components

TI-2022-03216 CVE-2022-3484 · GHSA-7jh3-h852-qg8m

WPB Show Core - Reflected Cross-Site Scripting

Priority MEDIUM 60

The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0101 Published 2022-11-14 No fix listed CWE-79
TI-2024-01202 CVE-2024-1292 · GHSA-3q9p-q428-g22j

WPB Show Core < 2.6 - Reflected XSS

Priority MEDIUM 55

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege u…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00499 Published 2024-04-08 Fixed in 2.7 CWE-79
TI-2024-01822 CVE-2024-1956 · GHSA-v5gh-4369-4w97

WPB Show Core < 2.7 - Reflected XSS

Priority LOW 28

The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2024-04-08 Fixed in 2.7 CWE-79
TI-2024-01824 CVE-2024-1958 · GHSA-w7x4-hw9x-fprc

WPB Show Core < 2.7 - Reflected XSS

Priority LOW 22

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users s…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00458 Published 2024-04-08 Fixed in 2.7 CWE-79
Open these records in search →