Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: gqevu6bsiz Clear all filters
TI-2024-35740 CVE-2024-53278 · GHSA-ghx6-2rmh-c36g

Cross-site scripting in gqevu6bsiz WP Admin UI Customize

Priority LOW 22

Cross-site scripting vulnerability exists in WP Admin UI Customize versions prior to ver 1.5.14.

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00402 Published 2024-11-26 No fix listed CWE-79
TI-2024-02837 CVE-2024-3030 · GHSA-m526-rj4j-v6f6

Announce from the Dashboard <= 1.5.2 - Authenticated (Admin+) Stored Cross-Site Scripting

Priority LOW 20

The Announce from the Dashboard plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 1.5.2 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.4 Network High privileges No interaction EPSS 0.00365 Published 2024-04-04 No fix listed CWE-79