Clockwork Sms Notfications

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-50843 Dec 28, 19:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.0.4. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Clockwork Sms Notfications Mediaburst

NVD

CVSS 3.1

7.6

EPSS

0.3%

CVE-2017-17780 Dec 20, 03:29 MEDIUM POC PATCH This Month

The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

PHP WordPress XSS Two Factor Authentication Formidable +8

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2023-50843

EPSS 0% CVSS 7.6

HIGH This Week

SQLi Clockwork Sms Notfications Mediaburst

NVD

CVE-2017-17780

EPSS 0% CVSS 6.1

MEDIUM POC PATCH This Month

PHP WordPress XSS +10

NVD