Simple Tweet

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-0700 MEDIUM POC This Month

The Simple Tweet plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Tweet this text value in all versions up to, and including, 1.4.0.2 due to insufficient input sanitization. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS WordPress Simple Tweet

NVD GitHub VulDB

CVSS 3.1

6.4

EPSS

0.2%

CVE-2023-45767 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Tweet

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2024-0700

EPSS 0% CVSS 6.4

MEDIUM POC This Month

XSS WordPress Simple Tweet

NVD GitHub VulDB

CVE-2023-45767

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Simple Tweet

NVD