Splashing Images

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-6195 Jan 30, 20:29 HIGH POC PATCH This Week

admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress Code Injection Prototype Pollution Wordpress Plugin +1

NVD

CVSS 3.1

7.2

EPSS

3.7%

CVE-2018-6194 Jan 30, 20:29 MEDIUM POC PATCH This Month

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP WordPress XSS Wordpress Plugin Splashing Images

NVD

CVSS 3.0

4.8

EPSS

1.0%

CVE-2018-6195

EPSS 4% CVSS 7.2

HIGH POC PATCH This Week

PHP WordPress Code Injection +3

NVD

CVE-2018-6194

EPSS 1% CVSS 4.8

MEDIUM POC PATCH This Month

PHP WordPress XSS +2

NVD