Lucene search
+L
WpvulndbMost viewed

14633 matches found

WPVulnDB
WPVulnDB
•added 2021/09/22 12:00 a.m.•23 views

Ninja Forms < 3.5.8 - Unprotected REST-API to Email Injection

The plugin is vulnerable to arbitrary email sending via the triggeremailaction function found in the /includes/Routes/Submissions.php file, in versions up to and including 3.5.7. This allows authenticated attackers to send arbitrary emails from the affected server via the...

6.4CVSS0.8AI score0.00657EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/21 12:00 a.m.•23 views

WP HTML Author Bio <= 1.2.0 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise the HTML allowed in the Bio of users, allowing them to use malicious JavaScript code, which will be executed when anyone visit a post in the frontend made by such user. As a result, user with a role as low as author could perform Cross-Site Scripting attacks against...

5.4CVSS1.2AI score0.018EPSS
SaveExploits3Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/21 12:00 a.m.•23 views

Game Server Status <= 1.0 - Admin+ SQL Injection

The plugin does not validate or escape the serverid parameter before using it in SQL statement, leading to an Authenticated SQL Injection in an admin page PoC sqlmap -u "https://example.com/wp-admin/admin.php?page=grohsfabian-add-game-serversid=1" -p serverid --dbms mysql --cookie your cookie...

7.2CVSS0.2AI score0.01343EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/21 12:00 a.m.•23 views

Telefication <= 1.8.0 - Open Relay & Server-Side Request Forgery

The plugin is vulnerable to Open Proxy and Server-Side Request Forgery via the /bypass.php file due to a user-supplied URL request value that gets called by a curl requests...

5.8CVSS2.9AI score0.01377EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/20 12:00 a.m.•23 views

Tutor LMS < 1.9.9 - Multiple Admin+ Stored Cross-Site Scripting

The plugin does not escape some of its settings before outputting them in attributes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC Put the following payload in the Plugin's Settings General "Error message...

4.8CVSS0.4AI score0.00643EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/20 12:00 a.m.•23 views

One User Avatar < 2.3.7 - Contributor+ Stored Cross-Site Scripting

The plugin does not escape the link and target attributes of its shortcode, allowing users with a role as low as Contributor to perform Stored Cross-Site Scripting attacks PoC avatar link="javascript:alertorigin" avatar target='" style="animation-name:twentytwentyone-close-button-transition"...

5.4CVSS3.5AI score0.0065EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•23 views

WordPress InviteBox Plugin <= 1.4.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the message parameter found in the /admin/admin.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS5AI score0.00819EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•23 views

WooCommerce Payment Gateway Per Category <= 2.0.10 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /includes/pluginsettings.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.5AI score0.00938EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•23 views

SMS OVH <= 0.1 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the position parameter found in the /sms-ovh-sent.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.7AI score0.00782EPSS
SaveExploits0References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•23 views

OSD Subscribe <= 1.2.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the osdsubscribemessage parameter found in the /options/osdsubscribeoptionssubscribers.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.6AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/09 12:00 a.m.•23 views

Advance Search < 1.1.3 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the wpasid parameter found in the /inc/admin/views/html-advance-search-admin-options.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.6AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/03 12:00 a.m.•23 views

Support Board < 3.3.4 - Multiple Unauthenticated SQL Injections

The plugin does not escape multiple POST parameters such as statuscode, department, userid, conversationid, conversationstatuscode, and recipientid before using them in SQL statements, leading to SQL injections which are exploitable by unauthenticated users. PoC The login-cookie parameter is...

9.8CVSS1.5AI score0.05603EPSS
SaveExploits3References2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/09/02 12:00 a.m.•23 views

Meow Gallery < 4.1.9 - Contributor+ SQL Injection

The plugin does not sanitise, validate or escape the ids attribute of its gallery shortcode available for users as low as Contributor before using it in an SQL statement, leading to an authenticated SQL Injection issue. The injection also allows the returned values to be manipulated in a way that...

8.1CVSS1.7AI score0.01168EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/26 12:00 a.m.•23 views

Woffice < 4.0.2 - Unauthenticated Disclosure of Notification Titles

The theme lacks authentication checks before returning the titles of notifications between the site's users. PoC Any request to the wofficeNotificationGet ajax endpoint will return titles of notifications sent between users. Example:...

1.6AI score
SaveExploits0Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•23 views

Gallery Blocks with Lightbox < 2.2.1- Authenticated Stored Cross-Site Scripting

A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below . The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...

5.4CVSS5AI score0.00618EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•23 views

Timetable and Event Schedule by MotoPress < 2.4.2 - Unauthorised Event TimeSlot Update

The plugin does not have proper access control when updating a timeslot, allowing any user with the editposts capability contributor+ to update arbitrary timeslot from any events. Furthermore, no CSRF check is in place as well, allowing such attack to be perform via CSRF against a logged in with...

5.4CVSS1.4AI score0.00506EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•23 views

OMGF < 4.5.4 - Subscriber+ Arbitrary File/Folder Deletion

The plugin does not enforce path validation, authorisation and CSRF checks in the omgfajaxemptydir AJAX action, which allows any authenticated users to delete arbitrary files or folders on the server. PoC As an authenticated user, with a role as low as subscriber, viewing the admin the dashboard...

8.1CVSS3.2AI score0.00912EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/23 12:00 a.m.•23 views

Timetable and Event Schedule by MotoPress < 2.3.19 - Author+ Stored Cross-Site Scripting

The plugin does not sanitise some of its parameters, which could allow low privilege users such as author to perform XSS attacks against frontend and backend users when viewing the related event/s PoC Create an event with the following payload in the description of a timeslot: The XSS will be...

5.4CVSS4.7AI score0.00888EPSS
SaveExploits2References2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/22 12:00 a.m.•23 views

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetchproductajax functionality in the plugin uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. PoC POST /wp-admin/admin-ajax.php HTTP/1.1 Content-Length: 162 Accept: / X-Requested-With:...

6.5CVSS0.5AI score0.01533EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/18 12:00 a.m.•23 views

Visual Link Preview < 2.2.3 - Unauthorised AJAX Calls

The plugin does not enforce authorisation on several AJAX actions and has the CSRF nonce displayed for all authenticated users, allowing any authenticated user such as subscriber to call them and 1 Get and search through title and content of Draft post, 2 Get title of a password-protected post as...

5.5CVSS1.2AI score0.00635EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/17 12:00 a.m.•23 views

Fileviewer <= 2.2 - Arbitrary File Upload/Deletion via CSRF

The plugin does not have CSRF checks in place when performing actions such as upload and delete files. As a result, attackers could make a logged in administrator delete and upload arbitrary files via a CSRF attack PoC To delete /phpinfo.php:...

8.8CVSS1.6AI score0.00713EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/16 12:00 a.m.•23 views

Language Bar Flags <= 1.0.8 - CSRF to Stored XSS

The plugin does not have any CSRF in place when saving its settings and did not sanitise or escape them when generating the flag bar in the frontend. This could allow attackers to make a logged in admin change the settings, and set Cross-Site Scripting payload in them, which will be executed in t...

4.3CVSS2.2AI score0.00483EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/13 12:00 a.m.•23 views

Plugmatter Pricing Table Lite <= 1.0.32 - Reflected Cross-Site Scripting

The plugin is vulnerable to Reflected Cross-Site Scripting via the email parameter in the /license.php file which allows attackers to inject arbitrary web scripts...

6.1CVSS4.4AI score0.00895EPSS
SaveExploits1References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/13 12:00 a.m.•23 views

Moova for WooCommerce < 3.8 - Reflected Cross-Site Scripting

The plugin does not escape the lat parameter of the moovacustomfields AJAA action available to both unauthenticated and authenticated users before outputting it back in the response, leading to a Reflected Cross-Site Scripting issue PoC...

6.1CVSS3.3AI score0.00938EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/10 12:00 a.m.•23 views

Book appointment Online < 1.39 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise or escape Service Prices before outputting it in the List, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed. PoC In the admin dashboard navigate to Services Add service and put the...

4.8CVSS1.3AI score0.00617EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/09 12:00 a.m.•23 views

Stop Spammers Security < 2021.18 - Authenticated Stored XSS

The plugin does not escape some of its settings, allowing high privilege users such as admin to set Cross-Site Scripting payloads in them even when the unfilteredhtml capability is disallowed PoC Put the following payload in any of the API field of the Web Services settings: " autofocus...

5.4CVSS2.3AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/08/04 12:00 a.m.•23 views

Availability Calendar < 1.2.1 - Authenticated SQL Injection

The plugin does not escape the category attribute from its shortcode before using it in a SQL statement, leading to a SQL Injection issue, which can be exploited by any user able to add shortcode to posts/pages, such as contributor+ PoC With an account role as low as contributor, put the followin...

8.8CVSS2.5AI score0.01334EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/29 12:00 a.m.•23 views

FluentSMTP < 2.0.1 - Authenticated Stored XSS

The plugin does not sanitize parameters before storing the settings in the database, nor does the plugin escape the values before outputting them when viewing the SMTP settings set by this plugin, leading to a stored cross site scripting XSS vulnerability. Only users with roles capable of managin...

3.5CVSS0.4AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/27 12:00 a.m.•23 views

uListing < 2.0.6 - Multiple CSRF

The plugin is lacking proper CSRF checks in multiple protected actions within wp-admin pages, leaving them vulnerable to CSRF attacks. PoC PoC | CSRF | Add/Edit Pricing Plans: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: agent or admin cookies User-Agent: Mozilla/5.0 Content-Typ...

6.8CVSS0.8AI score0.00443EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/27 12:00 a.m.•23 views

uListing < 2.0.6 - Authenticated IDOR

An Authenticated User IDOR vulnerability was discovered in the plugin. PoC Important: userid and listingid values ​​are dependent on each other, that is, if the author ID == 4, the data can only be modified for those ADs and pages that relate to this particular ID. You can find out the author of...

6.5CVSS0.5AI score0.011EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/27 12:00 a.m.•23 views

uListing < 2.0.6 - Modify User Roles via CSRF

An Add/Edit User Roles via CSRF vulnerability was discovered in the plugin. Missing WPNonce security tokens https://codex.wordpress.org/WordPressNonces . PoC PoC | CSRF | Add/Edit User Roles: POST /wp-admin/admin-ajax.php HTTP/2 Host: example.com Cookie: cookies User-Agent: Mozilla/5.0...

4.3CVSS0.5AI score0.00442EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/26 12:00 a.m.•23 views

uListing < 2.0.4 - Unauthenticated SQL Injection

An Unauthenticated SQL Injection vulnerability was discovered in the plugin. Vulnerable parameters: custom. SQL Injection types: Error-based, Boolean-based Blind, Time-based Blind. PoC PoC 1 | Unauthenticated SQL Injection | Tables: sqlmap...

7.5CVSS0.2AI score0.021EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/24 12:00 a.m.•23 views

Timeline Calendar <= 1.2 - Authenticated (admin+) SQL Injection

The plugin does not sanitise, validate or escape the edit GET parameter before using it in a SQL statement when editing events, leading to an authenticated SQL injection issue. Other SQL Injections are also present in the plugin PoC GET...

6.5CVSS1.9AI score0.01578EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/23 12:00 a.m.•23 views

GTranslate < 2.8.65 - Reflected Cross-Site Scripting (XSS)

In the Pro and Enterprise versions of GTranslate 2.8.65, the gtranslaterequesturivar function runs at the top of all pages and echoes out the contents of $SERVER'REQUESTURI'. Although this uses addslashes, and most modern browsers automatically URLencode requests, this plugin is still vulnerable ...

4.3CVSS1AI score0.01572EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/23 12:00 a.m.•23 views

Alipay <= 3.7.2 - Authenticated SQL Injection

A proid GET parameter of the plugin is not sanitised, properly escaped or validated before inserting to a SQL statement not delimited by quotes, leading to SQL injection. PoC GET /wp-admin/options-general.php?page=wsalipay=edit=-5818%20UNION%20ALL%20SELECT...

6.5CVSS1.8AI score0.01547EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/23 12:00 a.m.•23 views

Embed Youtube Video <= 1.0 - Authenticated SQL Injection

The editid GET parameter of the plugin is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. PoC GET /wp-admin/admin.php?page=embed-youtube-video-add=-6425+UNION+ALL+SELECT+NULL%2Cuser%28%29%2CNULL%2CNULL%2CNULL-- HTTP/1.1 Cache-Control: max-age=0...

6.5CVSS0.6AI score0.01547EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/21 12:00 a.m.•23 views

Grid Gallery < 1.2.5 - Authenticated Stored Cross Site Scripting (XSS)

The plugin does not properly sanitize the title field for image galleries when adding them via the admin dashboard, resulting in an authenticated Stored Cross-Site Scripting vulnerability. PoC Step 1: Install Grid Gallery - Photo Image Grid Gallery plugin in word press and activate the plugin. St...

3.5CVSS5.1AI score0.0062EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/19 12:00 a.m.•23 views

Wonder Video Embed < 1.8 - Contributor+ Stored XSS

The plugin does not escape parameters of its wonderpluginvideo shortcode, which could allow users with a role as low as Contributor to perform Stored XSS attacks. PoC wonderpluginvideo iframe='youtube.com?v=dQw4w9WgXcQ" onload="alert1'...

3.5CVSS2.9AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/05 12:00 a.m.•23 views

CSRF Bypass in Multiple Plugins

Multiple plugins are affected by CSRF bypass as they do not properly check for the nonce due to a logic flaw. This could allow attackers to make logged in users do unwanted actions...

4.8AI score
SaveExploits0References1Affected Software6
WPVulnDB
WPVulnDB
•added 2021/07/05 12:00 a.m.•23 views

Popular Brand SVG Icons - Simple Icons < 2.7.8 - Contributor+ Stored XSS

The plugin does not sanitise or validate some of its shortcode parameters, such as "color", "size" or "class", allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in...

3.5CVSS1.8AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/05 12:00 a.m.•23 views

Calendar Event Multi View < 1.4.01 - Unauthenticated Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape the 'start' and 'end' GET parameters before outputting them in the page via php/edit.php, leading to a reflected Cross-Site Scripting issue. PoC https://www.example.com/?cpmvcid=1doaction=mvparse=editindex=0=1=0=F00=1=999=a%22%3E%3Csvg/%3E%3C%22...

4.3CVSS2.1AI score0.03536EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/07/02 12:00 a.m.•23 views

Workreap < 2.2.2 - Missing Authorization Checks in Ajax Actions

The theme had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site. PoC log in as arbitrary...

5.5CVSS1.3AI score0.01251EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/29 12:00 a.m.•23 views

Popup Like box - Page Plugin < 3.5.3 - Authenticated Blind SQL Injections

The getfblikeboxes function in the plugin did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the getresults DB calls, leading to SQL injection issues in the admin dashboard PoC SQLMAP: python sqlmap.py -r r.txt -p orderby --level 5 --risk 3 --dbms...

6.5CVSS0.1AI score0.01362EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/29 12:00 a.m.•23 views

Quiz Maker < 6.2.0.9 - Multiple Authenticated Blind SQL Injections

The plugin did not properly sanitise and escape the order and orderby parameters before using them in SQL statements, leading to SQL injection issues in the admin dashboard When we WPScanTeam confirmed the issues, more SQL Injections were identified, reported and fixed by the vendor but have not...

6.5CVSS0.01292EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/29 12:00 a.m.•23 views

Poll Maker < 3.2.1 - Authenticated Blind SQL Injections

The getpollcategories, getpolls and getreports functions in the plugin did not use whitelist or validate the orderby parameter before using it in SQL statements passed to the getresults DB calls, leading to SQL injection issues in the admin dashboard PoC SQLMAP: python sqlmap.py -r r.txt -p order...

6.5CVSS0.1AI score0.01409EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/28 12:00 a.m.•23 views

ProfilePress 3.0 - 3.1.3 - Arbitrary File Upload in Image Uploader Component

The cover photo and profile photo upload functionalities of the plugin were vulnerable to arbitrary file uploads due to the use of exifimagetype for filetype checking. PoC 'Hax0r2', 'regemail' = '[email protected]', 'regpassword' = 'password', 'regpasswordpresent' = 'true', 'regfirstname' =...

9.8CVSS2.1AI score0.02101EPSS
SaveExploits2References1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/28 12:00 a.m.•23 views

Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)

The plugin does not sanitize the id parameter of its awesomeweatherrefresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting XSS Vulnerability. Note WPScanTeam: The issue was reported to the WP plugins team on May 4th, 2021, then June 7th, 2021 due to lack of update. PoC...

4.3CVSS0.6AI score0.00726EPSS
SaveExploits1Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/28 12:00 a.m.•23 views

Bookshelf <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS)

The plugin does not sanitise or escape its "Paypal email address" setting before outputting it in the page, leading to an authenticated Stored Cross-Site Scripting issue PoC Add the following payload in the "Paypal email address" setting of the plugin /wp-admin/admin.php?page=bookshelf-settings: ...

3.5CVSS1.2AI score0.0062EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/21 12:00 a.m.•23 views

Prismatic < 2.8 - Contributor+ Stored XSS

The plugin does not sanitise or validate some of its shortcode parameters, allowing users with a role as low as Contributor to set Cross-Site payload in them. A post made by a contributor would still have to be approved by an admin to have the XSS trigger able in the frontend, however, higher...

5.4CVSS1.8AI score0.00624EPSS
SaveExploits2Affected Software1
WPVulnDB
WPVulnDB
•added 2021/06/21 12:00 a.m.•23 views

Export Users With Meta < 0.6.5 - Authenticated SQL Injection

The plugin did not escape the list of roles to export before using them in a SQL statement in the export functionality, available to admins, leading to an authenticated SQL Injection. PoC POST /wp-admin/users.php?page=uewmsettings HTTP/1.1 Accept:...

7.2CVSS1.4AI score0.01416EPSS
SaveExploits2Affected Software1
Total number of security vulnerabilities5000