Mantenimiento Web

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-38075 Nov 18, 19:15 MEDIUM This Month

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in Mantenimiento web plugin <= 0.13 on WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS CSRF Mantenimiento Web

NVD

CVSS 3.1

6.1

EPSS

0.2%

CVE-2022-41980 Nov 08, 19:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin Mantenimiento Web

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2022-38075

EPSS 0% CVSS 6.1

MEDIUM This Month

WordPress XSS CSRF +1

NVD

CVE-2022-41980

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wordpress Plugin +1

NVD