Vendors / Wpscoop Records 3 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 1
Exploited now Wpscoop records in CISA KEV No Wpscoop vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 55
The ImageInject WordPress plugin through 1.17 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltere…
CVSS 3.1 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00559 · Published 2022-12-26 · No fix listed
Priority LOW 39
The ImageInject plugin 1.15 for WordPress has CSRF via wp-admin/options-general.php.
CVSS 3.0 HIGH 8.8· Network · No auth · User interaction · EPSS 0.00726 · Published 2018-01-08 · No fix listed CWE-352
Priority LOW 23
The ImageInject plugin 1.15 for WordPress has XSS via the flickr_appid parameter to wp-admin/options-general.php.
CVSS 3.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00799 · Published 2018-01-08 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
0 1 2 0 0
