Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Windyroad Clear all filters
TI-2021-16682 CVE-2021-39310 · GHSA-x623-q82m-99x6

Real WYSIWYG <= 0.0.2 Reflected Cross-Site Scripting

Priority LOW 29

The Real WYSIWYG WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to the use of PHP_SELF in the ~/real-wysiwyg.php file which allows attackers to inject arbitrary web scripts, in versions up to and in…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00782 Published 2021-12-14 No fix listed CWE-79
TI-2021-15926 CVE-2021-38319 · GHSA-899p-97g6-x4h4

More From Google <= 0.0.2 Reflected Cross-Site Scripting

Priority LOW 29

The More From Google WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER["PHP_SELF"] value in the ~/morefromgoogle.php file which allows attackers to inject arbitrary web scripts,…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00895 Published 2021-09-09 No fix listed CWE-79