Iframe

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4919 MEDIUM POC PATCH This Month

The iframe plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the `iframe` shortcode in versions up to, and including, 4.6 due to insufficient input sanitization and output. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS WordPress Iframe

NVD VulDB

CVSS 3.1

6.4

EPSS

0.1%

CVE-2023-24394 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Iframe

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2020-12696 MEDIUM This Month

The iframe plugin before 4.5 for WordPress does not sanitize a URL. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS WordPress Iframe

NVD

CVSS 3.1

6.1

EPSS

2.0%

CVE-2023-4919

EPSS 0% CVSS 6.4

MEDIUM POC PATCH This Month

XSS WordPress Iframe

NVD VulDB

CVE-2023-24394

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Iframe

NVD

CVE-2020-12696

EPSS 2% CVSS 6.1

MEDIUM This Month

XSS WordPress Iframe

NVD