Social Comments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23977 Apr 04, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Social Comments Heateor

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2022-0876 Apr 25, 16:16 MEDIUM POC This Month

The Social comments by WpDevArt WordPress plugin before 2.5.0 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Social Comments Wpdevart

NVD WPScan

CVSS 3.1

4.8

EPSS

0.6%

CVE-2023-23977

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Social Comments +1

NVD

CVE-2022-0876

EPSS 1% CVSS 4.8

MEDIUM POC This Month

WordPress XSS Social Comments +1

NVD WPScan