Skip to main content

Ajaydsouza

3 CVEs vendor

Monthly

CVE-2023-2813 Sep 04, 12:15 MEDIUM POC This Month

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Arendelle Everse Nokke +48
NVD WPScan
CVSS 3.1
6.1
EPSS
1.0%
CVE-2014-3937 Jun 02, 15:55 HIGH PATCH This Week

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress SQLi Contextual Related Posts Wordpress Plugin Ajaydsouza
NVD
CVSS 2.0
7.5
EPSS
0.4%
CVE-2013-2710 Jun 02, 15:55 MEDIUM PATCH This Month

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

WordPress XSS CSRF Contextual Related Posts Wordpress Plugin +1
NVD
CVSS 2.0
6.8
EPSS
0.1%
EPSS 1% CVSS 6.1
MEDIUM POC This Month

All of the above Aapna WordPress theme through 1.3, Anand WordPress theme through 1.2, Anfaust WordPress theme through 1.1, Arendelle WordPress theme before 1.1.13, Atlast Business WordPress theme. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Arendelle +50
NVD WPScan
EPSS 0% CVSS 7.5
HIGH PATCH This Week

SQL injection vulnerability in the Contextual Related Posts plugin before 1.8.10.2 for WordPress allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity.

WordPress SQLi Contextual Related Posts +2
NVD
EPSS 0% CVSS 6.8
MEDIUM PATCH This Month

Cross-site request forgery (CSRF) vulnerability in the Contextual Related Posts plugin before 1.8.7 for WordPress allows remote attackers to hijack the authentication of administrators for requests. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable.

WordPress XSS CSRF +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy