Read the docs

WP Darko

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

WP Darko records in CISA KEV

No WP Darko vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Team Members 4 records MEDIUM Responsive Pricing Table 3 records MEDIUM Responsive Tabs 3 records MEDIUM Top Bar 2 records MEDIUM Grid Shortcodes 1 record MEDIUM

Records

2 records in Top Bar · all components

TI-2024-01543 CVE-2024-1660 · GHSA-hhr3-pmv2-95vx

Top Bar < 3.0.5 - Admin+ Stored XSS

Priority MEDIUM 55

The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00441 Published 2024-04-15 Fixed in 3.0.5 CWE-79
TI-2022-02431 CVE-2022-2629 · GHSA-q6g9-37mh-p56c

Top Bar < 3.0.4 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high privilege users such as admin to perform Stored Cross-Site Scri…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00644 Published 2022-10-10 Fixed in 3.0.4 CWE-79
Open these records in search →