The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
WordPress
XSS
Wp Ulike
NVD
WPScan
CVSS 3.1
3.5
EPSS
0.4%
An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. Rated low severity (CVSS 2.4), this vulnerability is low attack complexity. No vendor patch available.
Information Disclosure
Qnap
Qts
Quts Hero
NVD
CVSS 3.1
2.4
EPSS
0.2%
An improper certificate validation vulnerability has been reported to affect QuMagie. Rated low severity (CVSS 1.0), this vulnerability is no authentication required, low attack complexity. No vendor patch available.
Information Disclosure
Qumagie
NVD
CVSS 4.0
1.0
EPSS
0.1%