Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Iseard Component: Kudos Donations Clear all filters
TI-2024-10830 CVE-2024-11684 · GHSA-8cqw-cphw-f2wr

Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting

Priority LOW 28

The Kudos Donations – Easy donations and payments with Mollie plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 's' parameter in all versions up to, and including, 3.2.9 due to insufficient inp…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0043 Published 2024-11-28 No fix listed CWE-79
TI-2024-10831 CVE-2024-11685 · GHSA-xjmg-ppqq-vfgg

Kudos Donations – Easy donations and payments with Mollie <= 3.2.9 - Reflected Cross-Site Scripting via 'add_query_arg'

Priority LOW 27

The `Kudos Donations – Easy donations and payments with Mollie` plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of `add_query_arg` without appropriate escaping on the URL in all versio…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00367 Published 2024-11-28 No fix listed CWE-79