Ravpage

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13789 Feb 20, 10:15 CRITICAL Act Now

The ravpage plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 2.31 via deserialization of untrusted input from the 'paramsv2' parameter. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP WordPress Information Disclosure Deserialization Ravpage +1

NVD

CVSS 3.1

9.8

EPSS

1.9%

CVE-2022-29415 Apr 28, 16:15 MEDIUM This Month

Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Ravpage Wordpress Plugin

NVD

CVSS 3.1

6.1

EPSS

0.7%

CVE-2024-13789

EPSS 2% CVSS 9.8

CRITICAL Act Now

PHP WordPress Information Disclosure +3

NVD

CVE-2022-29415

EPSS 1% CVSS 6.1

MEDIUM This Month

WordPress XSS Ravpage +1

NVD