Vulnerabilities

TI-2024-34583 CVE-2024-51669 · GHSA-mp9m-637r-pmhw

WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Kalmang Dynamic Widgets dynamic-widgets.This issue affects Dynamic Widgets: from n/a through <= 1.6.4.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-11-19 No fix listed CWE-352

TI-2015-08028 CVE-2015-10100 · GHSA-587p-pvvj-3ghc

Dynamic Widgets Plugin dynwid_class.php sql injection

MEDIUM 44

A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01054 Published 2023-04-10 No fix listed CWE-89

TI-2015-07814 CVE-2015-9437 · GHSA-xf27-2797-g5jw

The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via…

LOW 31

The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00881 Published 2019-09-26 No fix listed CWE-352

TI-2015-07813 CVE-2015-9436 · GHSA-f3rf-2wrm-7mv6

The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the…

LOW 27

The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01044 Published 2019-09-26 No fix listed CWE-79

Vulnerabilities

Filters

WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability

Dynamic Widgets Plugin dynwid_class.php sql injection

The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via…

The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the…