Read the docs

WPGlobus

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WPGlobus records in CISA KEV

No WPGlobus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records

Priority LOW 24

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[browser_redirect][redirect_by_language] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00805 Published 2018-01-12 Fixed in 1.9.7 CWE-79
Priority LOW 23

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00748 Published 2018-01-12 Fixed in 1.9.7 CWE-79
Priority LOW 23

The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[enabled_languages][en] or wpglobus_option[enabled_languages][fr] (or any other language) parameter to wp-admin/options.php.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00748 Published 2018-01-12 Fixed in 1.9.7 CWE-79
Open these records in search →