Wp Recentcomments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1068 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

WordPress PHP XSS Wp Recentcomments

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-1067 HIGH This Week

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi PHP Wp Recentcomments

NVD

CVSS 2.0

7.5

EPSS

0.5%

CVE-2012-1068

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress PHP XSS +1

NVD

CVE-2012-1067

EPSS 1% CVSS 7.5

HIGH This Week

WordPress SQLi PHP +1

NVD