2018-01-13 - CVE Archive

CVE-2018-5673 Jan 13, 00:29 HIGH POC This Week

An issue was discovered in the booking-calendar plugin 2.1.7 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress CSRF Booking Calendar Booking Calendar Project

NVD GitHub

CVSS 3.0

8.8

EPSS

0.8%

CVE-2018-5669 Jan 13, 00:29 HIGH POC This Week

An issue was discovered in the read-and-understood plugin 2.1 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress CSRF Read And Understood Read And Understood Project

NVD GitHub

CVSS 3.0

8.8

EPSS

0.6%

CVE-2018-5658 Jan 13, 00:29 HIGH POC This Week

An issue was discovered in the responsive-coming-soon-page plugin 1.1.18 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress CSRF Responsive Coming Soon Page Responsive Coming Soon Page Project

NVD GitHub

CVSS 3.0

8.8

EPSS

0.6%

CVE-2018-5656 Jan 13, 00:29 HIGH POC This Week

An issue was discovered in the weblizar-pinterest-feeds plugin 1.1.1 for WordPress. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress CSRF Pinterest Feeds Weblizar

NVD GitHub

CVSS 3.0

8.8

EPSS

0.6%