wpchill

Records141All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high37CVSS 7.0–8.9

Exploited now

wpchill records in CISA KEV

No wpchill vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Download Monitor 12 records HIGH Strong Testimonials 6 records MEDIUM Modula Image Gallery 5 records MEDIUM Check & Log Email 3 records LOW Passster 3 records LOW Remove Footer Credit 3 records LOW Cpo Shortcodes 2 records LOW Gallery Photoblocks 2 records LOW

Records

2 records in Cpo Shortcodes · all components

TI-2023-05247 CVE-2023-5704 · GHSA-gv58-x49p-v6g9

CPO Shortcodes <= 1.5.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

LOW 29

The CPO Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.5.0 due to insufficient input sanitization and output escaping on u…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00485 Published 2023-11-22 No fix listed CWE-79

TI-2022-19309 CVE-2022-40672 · GHSA-5wwv-hh2v-ww89

WordPress CPO Shortcodes plugin <= 1.5.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00597 Published 2022-09-23 No fix listed CWE-79

Open these records in search →

Critical	3
High	37
Medium	100
Low	1
No CVSS	0