Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: Wpb Show Core Project Clear all filters
TI-2024-01824 CVE-2024-1958 · GHSA-w7x4-hw9x-fprc

WPB Show Core < 2.7 - Reflected XSS

Priority LOW 22

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users s…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00458 Published 2024-04-08 Fixed in 2.7 CWE-79
TI-2024-01822 CVE-2024-1956 · GHSA-v5gh-4369-4w97

WPB Show Core < 2.7 - Reflected XSS

Priority LOW 28

The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00499 Published 2024-04-08 Fixed in 2.7 CWE-79
TI-2024-01202 CVE-2024-1292 · GHSA-3q9p-q428-g22j

WPB Show Core < 2.6 - Reflected XSS

Priority MEDIUM 55

The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege u…

CVSS 3.1MEDIUM 4.7 Network No auth User interaction EPSS 0.00499 Published 2024-04-08 Fixed in 2.7 CWE-79
TI-2022-03216 CVE-2022-3484 · GHSA-7jh3-h852-qg8m

WPB Show Core - Reflected Cross-Site Scripting

Priority MEDIUM 60

The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0101 Published 2022-11-14 No fix listed CWE-79