Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Hedge3 Clear all filters
TI-2024-10530 CVE-2024-11365 · GHSA-5jfq-6f7f-w994

Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes <= 1.1.6 - Reflected Cross-Site Scripting

Priority LOW 28

The Crypto and DeFi Widgets – Web3 Cryptocurrency Shortcodes plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in all versions up…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00625 Published 2024-11-21 No fix listed CWE-79