Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Meks Component: Meks Easy Ads Widget Clear all filters
TI-2024-25048 CVE-2024-37548 · GHSA-7pwf-32mx-g3j5

WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Meks Meks Easy Ads Widget allows Stored XSS.This issue affects Meks Easy Ads Widget: from n/a through 2.0.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00274 Published 2024-07-21 No fix listed CWE-79
TI-2023-11234 CVE-2023-25989 · GHSA-m9vg-3mw3-9gwh

Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

Priority LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Meks Video Importer, Meks Time Ago, Meks ThemeForest Smart Widget, Meks Smart Author Widget, Meks Audio Player, Meks Easy Maps, Meks Easy Photo Feed Widget, Meks Simple…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00444 Published 2023-10-03 No fix listed CWE-352