WPmanage

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

WPmanage records in CISA KEV

No WPmanage vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Uji Countdown 2 records MEDIUM Uji Popup 1 record LOW

Records

3 records

TI-2022-03517 CVE-2022-3837 · GHSA-3pv7-h25w-9xp8

Uji Countdown < 2.3.1 - Admin+ Stored XSS

MEDIUM 55

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilte…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00493 Published 2022-12-05 Fixed in 2.3.1

TI-2023-09469 CVE-2023-23641 · GHSA-r777-4879-hrqc

WordPress Uji Popup Plugin <= 1.4.3 is vulnerable to Cross Site Scripting (XSS)

LOW 29

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPmanage Uji Popup plugin <= 1.4.3 versions.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.00361 Published 2023-05-16 No fix listed CWE-79

TI-2016-08938 CVE-2016-10900 · GHSA-89x3-9fp9-3xgq

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

LOW 29

The uji-countdown plugin before 2.0.7 for WordPress has XSS.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00913 Published 2019-08-21 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	3
Low	0
No CVSS	0