Webcodin

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-46638 Nov 13, 01:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Webcodin WCP OpenWeather plugin <= 2.5.0 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wcp Openweather Webcodin

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-25471 Aug 30, 16:15 MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wcp Openweather Webcodin

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-22703 May 15, 11:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Wcp Contact Form Webcodin

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-46638

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wcp Openweather Webcodin

NVD

CVE-2023-25471

EPSS 0% CVSS 6.1

MEDIUM POC This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Wcp Openweather Webcodin

NVD

CVE-2023-22703

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Wcp Contact Form Webcodin

NVD