Mantenimiento Web

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-38075 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin <= 0.13 on WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF WordPress XSS Mantenimiento Web

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2022-41980 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Mantenimiento Web

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2022-38075

EPSS 0% CVSS 6.1

MEDIUM This Month

CSRF WordPress XSS +1

NVD

CVE-2022-41980

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Mantenimiento Web

NVD