Read the docs

wpo-HR

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wpo-HR records in CISA KEV

No wpo-HR vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ngg Smart Image Search 1 record LOW

Records

1 record in Ngg Smart Image Search · all components

TI-2024-12697 CVE-2024-13658 · GHSA-xvcx-v8p3-jwg2

NGG Smart Image Search <= 3.2.1 - Authenticated (Contributor+) Stored Cross-Site Scripting

Priority LOW 28

The NGG Smart Image Search plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'hr_SIS_nextgen_searchbox' shortcode in all versions up to, and including, 3.2.1 due to insufficient input san…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00299 Published 2025-02-12 No fix listed CWE-79
Open these records in search →