Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: PickPlugins Component: Team Showcase Clear all filters
TI-2020-18382 CVE-2020-35939 · GHSA-fwfq-c389-w955

PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for…

Priority MEDIUM 42

PHP Object injection vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a rem…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2021-01-01 No fix listed CWE-502
TI-2020-18381 CVE-2020-35938 · GHSA-gpmw-c588-4p7h

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress…

Priority MEDIUM 42

PHP Object injection vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to inject arbitrary PHP objects due to insecure unserialization of data supplied in a remotely…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02108 Published 2021-01-01 No fix listed CWE-502
TI-2020-18380 CVE-2020-35937 · GHSA-p7xx-frqx-57x6

Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before…

Priority LOW 38

Stored Cross-Site Scripting (XSS) vulnerabilities in the Team Showcase plugin before 1.22.16 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafte…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2021-01-01 No fix listed CWE-79
TI-2020-18379 CVE-2020-35936 · GHSA-f73m-j2hx-pp49

Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73…

Priority LOW 38

Stored Cross-Site Scripting (XSS) vulnerabilities in the Post Grid plugin before 2.0.73 for WordPress allow remote authenticated attackers to import layouts including JavaScript supplied via a remotely hosted crafted pay…

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01671 Published 2021-01-01 No fix listed CWE-79