Wp Facethumb

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-4585 Jul 01, 14:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wp Facethumb

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2012-2371 Aug 13, 20:55 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wp Facethumb

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

3.7%

CVE-2014-4585

EPSS 0% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +1

NVD

CVE-2012-2371

EPSS 4% CVSS 4.3

MEDIUM POC This Month

PHP WordPress XSS +1

NVD Exploit-DB