WPB Show Core Project
WPB Show Core Project WPB Show Core: vulnerabilidades y CVE
WPB Show Core Project WPB Show Core tiene 6 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE6
Últimos 12 meses0
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2024-1958 | Media (4.8) | 0.46% | — | 8 abr 2024 | The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users… |
| CVE-2024-1956 | Media (6.1) | 0.50% | — | 8 abr 2024 | The wpb-show-core WordPress plugin before 2.7 does not sanitise and escape the parameters before outputting it back in the response of an unauthenticated request, leading to a Reflected Cross-Site Scripting |
| CVE-2024-1292 | Media (4.7) | 0.50% | — | 8 abr 2024 | The WPB Show Core WordPress plugin before 2.7 does not sanitise and escape some parameters before outputting them back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege… |
| CVE-2023-5974 | Crítica (9.8) | 3.1% | — | 27 nov 2023 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter. |
| CVE-2023-4922 | Crítica (9.8) | 16% | — | 27 nov 2023 | The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter. |
| CVE-2022-3484 | Media (6.1) | 0.95% | — | 14 nov 2022 | The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. |