Cpo Shortcodes

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5704 Nov 22, 16:15 MEDIUM PATCH This Month

The CPO Shortcodes plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcodes in all versions up to, and including, 1.5.0 due to insufficient input sanitization and. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Cpo Shortcodes Wordpress Plugin Wpchill

NVD VulDB

CVSS 3.1

6.4

EPSS

0.1%

CVE-2022-40672 Sep 23, 15:15 MEDIUM This Month

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Cpo Shortcodes Wordpress Plugin Wpchill

NVD

CVSS 3.1

4.8

EPSS

0.5%

CVE-2023-5704

EPSS 0% CVSS 6.4

MEDIUM PATCH This Month

WordPress XSS Cpo Shortcodes +2

NVD VulDB

CVE-2022-40672

EPSS 0% CVSS 4.8

MEDIUM This Month

WordPress XSS Cpo Shortcodes +2

NVD