Unyson

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-44472 MEDIUM This Month

Missing Authorization vulnerability in ThemeFuse Unyson.7.28. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Unyson

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2022-2219 HIGH POC This Week

The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS WordPress Unyson

NVD WPScan

CVSS 3.1

7.2

EPSS

1.4%

CVE-2023-44472

EPSS 0% CVSS 4.3

MEDIUM This Month

Missing Authorization vulnerability in ThemeFuse Unyson.7.28. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Unyson

NVD

CVE-2022-2219

EPSS 1% CVSS 7.2

HIGH POC This Week

XSS WordPress Unyson

NVD WPScan