Security Vulnerabilities - CVEs Published In August 2019
The rimons-twitter-widget plugin before 1.3 for WordPress has XSS.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The option-tree plugin before 2.5.4 for WordPress has XSS related to add_query_arg.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The chained-quiz plugin before 1.0 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The bws-smtp plugin before 1.1.0 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.001
Published
2019-08-20
The customer-area plugin before 7.4.3 for WordPress has XSS via admin pages.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The eelv-newsletter plugin before 4.6.1 for WordPress has XSS in the address book.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20
The eelv-newsletter plugin before 4.6.1 for WordPress has CSRF in the address book.
CVSS Score
8.8
EPSS Score
0.001
Published
2019-08-20
The football-pool plugin before 2.6.5 for WordPress has multiple XSS issues.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-20