Formula

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-5638 MEDIUM PATCH This Month

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'ti_customizer_notify_dismiss_recommended_plugins' AJAX action in all versions up to, and. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Formula

NVD

CVSS 3.1

6.1

EPSS

1.8%

CVE-2024-5613 MEDIUM PATCH This Month

The Formula theme for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘id’ parameter in the 'quality_customizer_notify_dismiss_action' AJAX action in all versions up to, and. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

XSS WordPress Formula

NVD

CVSS 3.1

6.1

EPSS

1.7%

CVE-2023-25166 npm MEDIUM PATCH This Month

formula is a math and string formula parser. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Formula

NVD GitHub

CVSS 3.1

6.5

EPSS

0.6%

CVE-2024-5638

EPSS 2% CVSS 6.1

MEDIUM PATCH This Month

WordPress XSS Formula

NVD

CVE-2024-5613

EPSS 2% CVSS 6.1

MEDIUM PATCH This Month

XSS WordPress Formula

NVD

CVE-2023-25166 npm

EPSS 1% CVSS 6.5

MEDIUM PATCH This Month

formula is a math and string formula parser. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity.

Denial Of Service Formula

NVD GitHub