Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Roytanck Component: Wp-cumulus Clear all filters
TI-2009-03955 CVE-2009-4170 · GHSA-mrjv-37qf-vj8v

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote…

Priority LOW 32

WP-Cumulus Plug-in 1.20 for WordPress, and possibly other versions, allows remote attackers to obtain sensitive information via a crafted request to wp-cumulus.php, probably without parameters, which reveals the installa…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06221 Published 2009-12-02 No fix listed CWE-200
TI-2009-03953 CVE-2009-4168 · GHSA-f865-32w6-7639

Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the…

Priority LOW 28

Cross-site scripting (XSS) vulnerability in Roy Tanck tagcloud.swf, as used in the WP-Cumulus plugin before 1.23 for WordPress and the Joomulus module 2.0 and earlier for Joomla!, allows remote attackers to inject arbitr…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05469 Published 2009-12-02 No fix listed CWE-79