Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Wp Smiley Project Clear all filters
TI-2015-03470 CVE-2015-4140 · GHSA-8j23-rqhr-c294

Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for…

Priority LOW 32

Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site scripting (XSS) attacks via…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01141 Published 2015-06-18 No fix listed CWE-352
TI-2015-03469 CVE-2015-4139 · GHSA-3gqq-5q23-3xww

Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1…

Priority LOW 20

Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more parameter to wp-admin/optio…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.01553 Published 2015-06-18 No fix listed CWE-79