Read the docs

Wpleadplus

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wpleadplus records in CISA KEV

No Wpleadplus vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Lead Plus X 2 records LOW

Records

2 records in Wp Lead Plus X · all components

TI-2020-09231 CVE-2020-11509 · GHSA-mr39-vf45-2r7q

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows…

Priority LOW 31

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01876 Published 2020-04-07 No fix listed CWE-79
TI-2020-09230 CVE-2020-11508 · GHSA-2chv-vxpq-wr23

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows…

Priority LOW 26

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00784 Published 2020-04-07 No fix listed CWE-79
Open these records in search →