Wcp Openweather

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-46638 Nov 13, 01:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wcp Openweather Webcodin

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-25471 Aug 30, 16:15 MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wcp Openweather Webcodin

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-46638

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wcp Openweather Webcodin

NVD

CVE-2023-25471

EPSS 0% CVSS 6.1

MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wcp Openweather Webcodin

NVD