Read the docs

WPPOOL

Records12All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

WPPOOL records in CISA KEV

No WPPOOL vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Dark Mode 3 records MEDIUM Sheets To Wp Table Live Sync 1 record LOW

Records

3 records in Wp Dark Mode · all components

TI-2022-04310 CVE-2022-4714 · GHSA-jpv9-4v9p-758r

WP Dark Mode < 4.0.0 - Contributor+ Stored XSS in Shortcode

Priority MEDIUM 58

The WP Dark Mode WordPress plugin before 4.0.0 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00457 Published 2023-02-21 Fixed in 4.0.0
TI-2023-00442 CVE-2023-0467 · GHSA-mrr5-9q84-93pr

WP Dark Mode < 4.0.8 - Subscriber+ Local File Inclusion

Priority MEDIUM 53

The WP Dark Mode WordPress plugin before 4.0.8 does not properly sanitize the style parameter in shortcodes before using it to load a PHP template.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00678 Published 2023-03-27 Fixed in 4.0.8 CWE-22
TI-2024-05064 CVE-2024-5449 · GHSA-p826-3x73-p9j2

Missing authorization in WPPOOL WP Dark Mode – Improve Accessibility with AI Powered Dark…

Priority LOW 20

The WP Dark Mode – WordPress Dark Mode Plugin for Improved Accessibility, Dark Theme, Night Mode, and Social Sharing plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability che…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-06-06 No fix listed CWE-862
Open these records in search →