News Announcement Scroll

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5663 HIGH PATCH This Week

The News Announcement Scroll plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 9.0.0 due to insufficient escaping on the user supplied. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity.

SQLi WordPress News Announcement Scroll

NVD VulDB

CVSS 3.1

8.8

EPSS

0.3%

CVE-2022-40694 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS News Announcement Scroll

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-5663

EPSS 0% CVSS 8.8

HIGH PATCH This Week

SQLi WordPress News Announcement Scroll

NVD VulDB

CVE-2022-40694

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS News Announcement Scroll

NVD