Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Androidbubbles Component: Wp Datepicker Clear all filters
TI-2024-11568 CVE-2024-12468 · GHSA-c8mf-72f6-38g5

WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting

Priority LOW 28

The WP Datepicker plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'wpdp_get_selected_datepicker' parameter in all versions up to, and including, 2.1.4 due to insufficient input sanitization a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00479 Published 2024-12-24 No fix listed CWE-79
TI-2024-29631 CVE-2024-44042 · GHSA-rjc7-82j2-g73g

WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Fahad Mahmood WP Datepicker wp-datepicker allows Stored XSS.This issue affects WP Datepicker: from n/a through <= 2.1.…

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00313 Published 2024-10-06 No fix listed CWE-79
TI-2024-03635 CVE-2024-3895 · GHSA-6r8w-jhg7-gpr9

WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 42

The WP Datepicker plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wpdp_add_new_datepicker_ajax() function in all versions up to, and including, 2.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00911 Published 2024-05-02 No fix listed CWE-862