Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Porternovelli Component: Widget Settings Importer/exporter Clear all filters
TI-2020-18937 CVE-2020-36769 · GHSA-hgpj-j8q9-2gfm

Widget Settings Importer/Exporter Plugin <= 1.5.3 - Unauthorized Widget Import to Stored Cross-Site Scripting

Priority LOW 33

The Widget Settings Importer/Exporter Plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the wp_ajax_import_widget_dataparameter AJAX action in versions up to, and including, 1.5.3 due to insufficient…

CVSS 3.1HIGH 7.4 Network Low privileges No interaction EPSS 0.00428 Published 2023-12-23 No fix listed CWE-79