Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Rich-web Clear all filters
TI-2022-01204 CVE-2022-1322 · GHSA-w277-77wc-wqp6

Coming Soon - Under Construction <= 1.1.9 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Coming Soon - Under Construction WordPress plugin through 1.1.9 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00647 Published 2022-08-22 No fix listed CWE-79
TI-2022-01206 CVE-2022-1324 · GHSA-5wpv-ch58-pr6r

Event Timeline <= 1.1.5 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is dis…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00622 Published 2022-08-01 No fix listed CWE-79
TI-2022-01209 CVE-2022-1327 · GHSA-p5wh-qr78-vvvh

Image Gallery - Grid Gallery < 1.1.6 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Image Gallery WordPress plugin before 1.1.6 does not sanitize and escape some of its Image fields, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_ht…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00588 Published 2022-06-27 Fixed in 1.1.6 CWE-79
TI-2021-07113 CVE-2021-24831 · GHSA-fh28-f6m7-2h5v

Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls

Priority LOW 35

All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete ar…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01235 Published 2022-01-03 Fixed in 1.3.2 CWE-862