Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Designchemical Clear all filters
TI-2023-04502 CVE-2023-4890 · GHSA-3fjr-j3qm-96cp

JQuery Accordion Menu Widget <= 3.1.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

Priority LOW 29

The JQuery Accordion Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcwp-jquery-accordion' shortcode in versions up to, and including, 3.1.2 due to insufficient input sanitization and…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00514 Published 2023-09-12 No fix listed CWE-79
TI-2018-14578 CVE-2018-20555 · GHSA-2w4c-hx38-p886

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote…

Priority MEDIUM 55

The Design Chemical Social Network Tabs plugin 1.7.1 for WordPress allows remote attackers to discover Twitter access_token, access_token_secret, consumer_key, and consumer_secret values by reading the dcwp_twitter.php s…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.10401 Published 2019-03-18 No fix listed CWE-200