Chartify

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-10571 Nov 14, 11:15 CRITICAL POC THREAT Emergency

The Chartify - WordPress Chart Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 2.9.5 via the 'source' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and EPSS exploitation probability 87.0%.

PHP WordPress RCE Information Disclosure LFI +3

NVD

CVSS 3.1

9.8

EPSS

87.0%

Threat

6.1

CVE-2023-47526 Feb 12, 07:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Chart Builder Team Chartify - WordPress Chart Plugin allows Stored XSS.0.6. Rated medium severity (CVSS 5.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Chartify Ays Pro

NVD

CVSS 3.1

5.9

EPSS

0.0%

CVE-2024-10571

EPSS 87% 6.1 CVSS 9.8

CRITICAL POC THREAT Emergency

PHP WordPress RCE +5

NVD

CVE-2023-47526

EPSS 0% CVSS 5.9

MEDIUM This Month

WordPress XSS Chartify +1

NVD