Bbsetheme

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2016-20072 Jun 15, 12:00 HIGH POC Monitor

BBS e-Franchise 1.1.1 plugin for WordPress contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the uid. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress Information Disclosure SQLi Wordpress Plugin Bbs E Franchise +1

NVD Exploit-DB

CVSS 4.0

8.8

EPSS

0.3%

CVE-2023-34174 Aug 30, 14:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Bbs E Popup Bbsetheme

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2016-20072

EPSS 0% CVSS 8.8

HIGH POC Monitor

WordPress Information Disclosure SQLi +3

NVD Exploit-DB

CVE-2023-34174

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Bbs E Popup Bbsetheme

NVD