Security Vulnerabilities - CVEs Published In August 2019
The wp-customer-reviews plugin before 3.0.9 for WordPress has CSRF in the admin tools.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-21
The GoDaddy godaddy-email-marketing-sign-up-forms plugin before 1.1.3 for WordPress has CSRF.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-21
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-21
The booking-calendar-contact-form plugin before 1.0.24 for WordPress has SQL injection.
CVSS Score
9.8
EPSS Score
0.005
Published
2019-08-21
The ad-buttons plugin before 2.3.2 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-21
The analytics-tracker plugin before 1.1.1 for WordPress has XSS via a search event.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-21
The booking-sms plugin before 1.1.0 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-21
The bws-google-analytics plugin before 1.7.1 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.001
Published
2019-08-21
The bws-google-maps plugin before 1.3.6 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.001
Published
2019-08-21
The bws-testimonials plugin before 0.1.9 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.001
Published
2019-08-21