Read the docs

Wpbeginner

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wpbeginner records in CISA KEV

No Wpbeginner vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Charitable 1 record LOW Floating Social Bar 1 record LOW Smash Balloon Social Post Feed 1 record LOW Sugar Calendar 1 record LOW Transients Manager 1 record LOW

Records

1 record in Sugar Calendar · all components

TI-2024-10084 CVE-2024-10878 · GHSA-hr7p-jmcg-rv72

Sugar Calendar (Lite) <= 3.3.0 - Reflected Cross-Site Scripting

Priority LOW 28

The Sugar Calendar – Simple Event Management plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg & remove_query_arg without appropriate escaping on the URL in all versions…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00482 Published 2024-11-26 No fix listed CWE-79
Open these records in search →