Waspthemes

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-43963 Aug 29, 18:15 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WaspThemes YellowPencil Visual CSS Style Editor allows Reflected XSS.6.1. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Yellowpencil Waspthemes

NVD

CVSS 3.1

6.1

EPSS

0.3%

CVE-2019-5984 Jul 05, 14:15 HIGH This Week

Cross-site request forgery (CSRF) vulnerability in Custom CSS Pro 1.0.3 and earlier allows remote attackers to hijack the authentication of administrators via unspecified vectors. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wordpress Plugin Custom Css Pro Waspthemes

NVD

CVSS 3.1

8.8

EPSS

1.0%

CVE-2024-43963

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS Yellowpencil Waspthemes

NVD

CVE-2019-5984

EPSS 1% CVSS 8.8

HIGH This Week

WordPress CSRF Wordpress Plugin +2

NVD