Wp Register Profile With Shortcode

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-5448 Jan 11, 04:15 HIGH PATCH This Week

The WP Register Profile With Shortcode plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.9. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

WordPress CSRF Wp Register Profile With Shortcode Wordpress Plugin

NVD VulDB

CVSS 3.1

8.8

EPSS

0.2%

CVE-2023-23818 Jun 12, 13:15 MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Register Profile With Shortcode

NVD

CVSS 3.1

4.8

EPSS

0.4%

CVE-2023-5448

EPSS 0% CVSS 8.8

HIGH PATCH This Week

WordPress CSRF Wp Register Profile With Shortcode +1

NVD VulDB

CVE-2023-23818

EPSS 0% CVSS 4.8

MEDIUM This Month

Auth. Rated medium severity (CVSS 4.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Wp Register Profile With Shortcode

NVD