Wp Smiley

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-4140 Jun 18, 18:59 MEDIUM POC This Month

Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduct cross-site. Rated medium severity (CVSS 6.8), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS CSRF Wp Smiley

NVD

CVSS 2.0

6.8

EPSS

0.1%

CVE-2015-4139 Jun 18, 18:59 LOW POC Monitor

Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via the s4w-more. Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

PHP WordPress XSS Wp Smiley

NVD

CVSS 2.0

3.5

EPSS

0.2%

CVE-2015-4140

EPSS 0% CVSS 6.8

MEDIUM POC This Month

PHP WordPress XSS +2

NVD

CVE-2015-4139

EPSS 0% CVSS 3.5

LOW POC Monitor

PHP WordPress XSS +1

NVD