Wp Facethumb

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-4585 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in the WP-FaceThumb plugin possibly 1.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the ajax_url parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS WordPress PHP Wp Facethumb

NVD

CVSS 2.0

4.3

EPSS

0.2%

CVE-2012-2371 MEDIUM POC This Month

Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

WordPress PHP XSS Wp Facethumb

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

3.7%

CVE-2014-4585

EPSS 0% CVSS 4.3

MEDIUM POC This Month

XSS WordPress PHP +1

NVD

CVE-2012-2371

EPSS 4% CVSS 4.3

MEDIUM POC This Month

WordPress PHP XSS +1

NVD Exploit-DB