WP Darko

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

WP Darko records in CISA KEV

No WP Darko vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Team Members 4 records MEDIUM Responsive Pricing Table 3 records MEDIUM Responsive Tabs 3 records MEDIUM Top Bar 2 records MEDIUM Grid Shortcodes 1 record MEDIUM

Records

3 records in Responsive Tabs · all components

TI-2024-03816 CVE-2024-4096 · GHSA-4c34-f6qc-56qv

Responsive Tabs <= 4.0.8 - Contributor+ Stored XSS

MEDIUM 60

The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contributors and above to perform Stored Cross-Site Scripting attac…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0043 Published 2024-07-30 No fix listed CWE-79

TI-2024-01718 CVE-2024-1846 · GHSA-h9pr-qr4v-f87f

Responsive Tabs < 4.0.7 - Contributor+ Stored XSS

LOW 25

The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the co…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00501 Published 2024-04-15 Fixed in 4.0.7 CWE-79

TI-2021-14981 CVE-2021-36893 · GHSA-rp23-74mj-mmv7

WordPress Responsive Tabs plugin <= 4.0.5 - Cross-Site Scripting (XSS) vulnerability

LOW 23

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress plugin) <= 4.0.5

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00599 Published 2022-04-11 No fix listed CWE-79

Open these records in search →