Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Splashing Images Project Clear all filters
TI-2018-04553 CVE-2018-6195 · GHSA-3gqc-3hvh-6hcg

admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin…

Priority LOW 38

admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to conduct PHP Object In…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03716 Published 2018-01-30 No fix listed CWE-1321
TI-2018-04552 CVE-2018-6194 · GHSA-9rf2-xwj7-j7x2

A cross-site scripting (XSS) vulnerability in…

Priority LOW 24

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to inject arbitrary web…

CVSS 3.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.01028 Published 2018-01-30 No fix listed CWE-79