Sumo

4 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-25033 Oct 06, 13:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Sumo Social Share Boost plugin <= 4.5 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Social Share Boost Sumo

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-25044 Sep 01, 11:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Social Share Boost Sumo

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-23688 May 15, 12:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Social Share Boost Sumo

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2015-4697 Sep 07, 20:29 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in Google Analyticator Wordpress Plugin before 6.4.9.3 rev @1183563. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Google CSRF Wordpress Plugin Google Analyticator +1

NVD

CVSS 3.0

8.8

EPSS

0.2%

CVE-2023-25033

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Social Share Boost Sumo

NVD

CVE-2023-25044

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Social Share Boost Sumo

NVD

CVE-2023-23688

EPSS 0% CVSS 5.4

MEDIUM This Month

Auth. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Social Share Boost Sumo

NVD

CVE-2015-4697

EPSS 0% CVSS 8.8

HIGH This Week

WordPress Google CSRF +3

NVD