Inboundnow

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-5227 Oct 18, 20:29 HIGH This Week

The Landing Pages plugin before 1.9.2 for WordPress allows remote attackers to execute arbitrary code via the url parameter. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress RCE Wordpress Plugin Wordpress Landing Pages Inboundnow

NVD

CVSS 3.0

8.8

EPSS

2.0%

CVE-2015-8350 Sep 11, 20:29 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities in the Calls to Action plugin before 2.5.1 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) open-tab. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wordpress Plugin Call To Action +1

NVD

CVSS 3.0

6.1

EPSS

0.2%

CVE-2015-5227

EPSS 2% CVSS 8.8

HIGH This Week

WordPress RCE Wordpress Plugin +2

NVD

CVE-2015-8350

EPSS 0% CVSS 6.1

MEDIUM POC This Month

PHP WordPress XSS +3

NVD