Splashing Images

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-6195 HIGH POC PATCH This Week

admin/partials/wp-splashing-admin-main.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows authenticated (administrator, editor, or author) remote attackers to. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

Code Injection WordPress Prototype Pollution PHP Splashing Images

NVD

CVSS 3.1

7.2

EPSS

3.7%

CVE-2018-6194 MEDIUM POC PATCH This Month

A cross-site scripting (XSS) vulnerability in admin/partials/wp-splashing-admin-sidebar.php in the Splashing Images plugin (wp-splashing-images) before 2.1.1 for WordPress allows remote attackers to. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

WordPress XSS PHP Splashing Images

NVD

CVSS 3.0

4.8

EPSS

1.0%

CVE-2018-6195

EPSS 4% CVSS 7.2

HIGH POC PATCH This Week

Code Injection WordPress Prototype Pollution +2

NVD

CVE-2018-6194

EPSS 1% CVSS 4.8

MEDIUM POC PATCH This Month

WordPress XSS PHP +1

NVD