Read the docs

WP CodeUs

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WP CodeUs records in CISA KEV

No WP CodeUs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Advanced Sermons 4 records LOW

Records

4 records in Advanced Sermons · all components

TI-2024-33890 CVE-2024-50458 · GHSA-vg8g-7jgx-v9fv

WordPress Advanced Sermons plugin <= 3.4 - Cross Site Scripting (XSS) vulnerability

Priority LOW 28

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WP CodeUs Advanced Sermons advanced-sermons allows Stored XSS.This issue affects Advanced Sermons: from n/a through <=…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00261 Published 2024-10-28 No fix listed CWE-79
TI-2024-07043 CVE-2024-7599 · GHSA-36pg-hxf8-378v

Advanced Sermons <= 3.3 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The Advanced Sermons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘sermon_video_embed’ parameter in all versions up to, and including, 3.3 due to insufficient input sanitization and output es…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00316 Published 2024-09-06 No fix listed CWE-79
Open these records in search →