Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: OTWthemes Component: Buttons Shortcode And Widget Clear all filters
TI-2024-00653 CVE-2024-0711 · GHSA-7qhg-pm6h-rj98

Buttons Shortcode and Widget <= 1.16 - Stored XSS via shortcode

Priority MEDIUM 60

The Buttons Shortcode and Widget WordPress plugin through 1.16 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow user…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00413 Published 2024-03-18 No fix listed CWE-79
TI-2024-16437 CVE-2024-24930 · GHSA-93hx-mvcm-5wmx

WordPress Buttons Shortcode and Widget Plugin <= 1.16 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in OTWthemes.Com Buttons Shortcode and Widget allows Stored XSS.This issue affects Buttons Shortcode and Widget: from n/a…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-02-12 No fix listed CWE-79