Wp Recentcomments

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-1068 Feb 14, 17:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the rc_ajax function in core.php in the WP-RecentComments plugin before 2.0.7 for WordPress allows remote attackers to inject arbitrary web script or HTML. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP WordPress XSS Wordpress Plugin Wp Recentcomments

NVD

CVSS 2.0

4.3

EPSS

0.3%

CVE-2012-1067 Feb 14, 17:55 HIGH This Week

SQL injection vulnerability in the WP-RecentComments plugin 2.0.7 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter in an rc-content action to index.php. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress SQLi Wp Recentcomments

NVD

CVSS 2.0

7.5

EPSS

0.5%

CVE-2012-1068

EPSS 0% CVSS 4.3

MEDIUM This Month

PHP WordPress XSS +2

NVD

CVE-2012-1067

EPSS 1% CVSS 7.5

HIGH This Week

PHP WordPress SQLi +1

NVD