Read the docs

WPeka

Records11All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

WPeka records in CISA KEV

No WPeka vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Cookie Consent 4 records LOW Wp Adcenter 2 records LOW Wplegalpages 2 records LOW

Records

2 records in Wplegalpages · all components

TI-2023-04573 CVE-2023-4968 · GHSA-645x-3j3m-f2c2

WPLegalPages <= 2.9.2 - Authenticated (Author+) Stored Cross-Site Scripting via Shortcode

Priority LOW 25

The WPLegalPages plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'wplegalpage' shortcode in versions up to, and including, 2.9.2 due to insufficient input sanitization and output escaping on user su…

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00526 Published 2023-10-20 No fix listed CWE-79
TI-2021-07384 CVE-2021-25106 · GHSA-h2hg-rvg6-p5x3

WPLegalPages < 2.7.1 - Subscriber+ Arbitrary Settings Update to Stored XSS

Priority LOW 25

The Privacy Policy Generator, Terms & Conditions Generator WordPress Plugin : WPLegalPages WordPress plugin before 2.7.1 does not check for authorisation and has a flawed CSRF logic when saving its settings, allowing any…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.006 Published 2022-02-07 Fixed in 2.7.1 CWE-79
Open these records in search →