Read the docs

wplegalpages

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

wplegalpages records in CISA KEV

No wplegalpages vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Wp Legal Pages · all components

Priority LOW 30

The wplegalpages plugin before 1.1 for WordPress has CSRF with resultant XSS via wp-admin/admin.php?page=legal-pages lp-domain-name, lp-business-name, lp-phone, lp-street, lp-city-state, lp-country, lp-email, lp-address,…

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00867 Published 2019-09-26 No fix listed CWE-352
Open these records in search →