2Joomla

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-44242 Oct 02, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS 2J Slideshow 2Joomla

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2020-36729 Jun 07, 02:15 MEDIUM POC PATCH This Month

The 2J-SlideShow Plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the 'twoj_slideshow_setup' function called via the wp_ajax_twoj_slideshow_setup AJAX. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress Authentication Bypass 2J Slideshow Wordpress Plugin 2Joomla

NVD

CVSS 3.1

5.4

EPSS

0.0%

CVE-2022-29426 May 20, 21:15 MEDIUM This Month

Authenticated (contributor or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in 2J Slideshow Team's Slideshow, Image Slider by 2J plugin <= 1.3.54 at WordPress. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS 2J Slideshow Wordpress Plugin 2Joomla

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2023-44242

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS 2J Slideshow 2Joomla

NVD

CVE-2020-36729

EPSS 0% CVSS 5.4

MEDIUM POC PATCH This Month

WordPress Authentication Bypass 2J Slideshow +2

NVD

CVE-2022-29426

EPSS 0% CVSS 5.4

MEDIUM This Month

WordPress XSS 2J Slideshow +2

NVD