Wishsuite

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-29927 MEDIUM This Month

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in HasTheme WishSuite allows Stored XSS.3.7. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wishsuite

NVD

CVSS 3.1

6.5

EPSS

0.2%

CVE-2023-32962 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wishsuite

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-23731 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in HasTheme WishSuite plugin <= 1.3.3 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wishsuite

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2024-29927

EPSS 0% CVSS 6.5

MEDIUM This Month

XSS Wishsuite

NVD

CVE-2023-32962

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress XSS Wishsuite

NVD

CVE-2023-23731

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wishsuite

NVD