Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Wpleadplus Component: Wp Lead Plus X Clear all filters
TI-2020-09231 CVE-2020-11509 · GHSA-mr39-vf45-2r7q

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows…

Priority LOW 31

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows remote attackers to upload page templates containing arbitrary JavaScript via the c37_wpl_import_template admin-post action (which will…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01876 Published 2020-04-07 No fix listed CWE-79
TI-2020-09230 CVE-2020-11508 · GHSA-2chv-vxpq-wr23

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows…

Priority LOW 26

An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via t…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00784 Published 2020-04-07 No fix listed CWE-79