Streamweasels

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13362 May 01, 05:29 MEDIUM This Month

Multiple plugins and/or themes for WordPress are vulnerable to Reflected Cross-Site Scripting via the url parameter in various versions due to insufficient input sanitization and output escaping. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai Wpbits Addons For Elementor Page Builder Unlimited Elements For Elementor +166

NVD

CVSS 3.1

6.1

EPSS

0.1%

CVE-2024-9897 Oct 19, 10:15 MEDIUM PATCH This Month

The StreamWeasels Twitch Integration plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's sw-twitch-embed shortcode in all versions up to, and including, 1.8.6 due to. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. This Cross-Site Scripting (XSS) vulnerability could allow attackers to inject malicious scripts into web pages viewed by other users.

WordPress XSS Wordpress Plugin Twitch Integration Streamweasels

NVD

CVSS 3.1

5.4

EPSS

0.3%

CVE-2023-25464 Apr 07, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Twitch Player Streamweasels

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2024-13362

EPSS 0% CVSS 6.1

MEDIUM This Month

WordPress XSS Image Alt Text Manager Bulk Dynamic Alt Tags For Image Seo Optimization Ai +168

NVD

CVE-2024-9897

EPSS 0% CVSS 5.4

MEDIUM PATCH This Month

WordPress XSS Wordpress Plugin +2

NVD

CVE-2023-25464

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Twitch Player Streamweasels

NVD