androidbubbles records

7 published records for vendor androidbubbles.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2024-47321No exploit	WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerabilityandroidbubbles · wp datepicker · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Nov 1, 2024
35Monitor	CVE-2024-3895No exploit	WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Updateandroidbubbles · wp datepicker · CWE-862 Broken access control (IDOR)	High8.8	—	0.9%	May 2, 2024
24Monitor	CVE-2022-1820No exploit	Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scriptingandroidbubbles · keep backup daily · CWE-79 Pre-auth XSS	Medium6.1	—	1.1%	Jun 13, 2022
24Monitor	CVE-2021-24798No exploit	WP Header Images < 2.0.1 - Reflected Cross-Site Scriptingandroidbubbles · wp header images · CWE-79 Pre-auth XSS	Medium6.1	—	0.8%	Nov 8, 2021
24Monitor	CVE-2024-12468No exploit	WP Datepicker <= 2.1.4 - Reflected Cross-Site Scriptingandroidbubbles · wp datepicker · CWE-79 Pre-auth XSS	Medium6.1	—	0.5%	Dec 24, 2024
24Monitor	CVE-2024-49629No exploit	WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerabilityandroidbubbles · endless posts navigation · CWE-352 Pre-auth XSS CSRF	Medium6.1	—	0.2%	Oct 20, 2024
19Monitor	CVE-2024-44042No exploit	WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerabilityandroidbubbles · wp datepicker · CWE-79 XSS	Medium4.8	—	0.3%	Oct 6, 2024

CVE-2024-47321
39Monitor
WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
androidbubbles · wp datepickerNov 1, 2024
CVE-2024-3895
35Monitor
WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
HighCVSS 8.8No exploitEPSS 1%
- Broken access control (IDOR)
androidbubbles · wp datepickerMay 2, 2024
CVE-2022-1820
24Monitor
Keep Backup Daily <= 2.0.2 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
androidbubbles · keep backup dailyJun 13, 2022
CVE-2021-24798
24Monitor
WP Header Images < 2.0.1 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
androidbubbles · wp header imagesNov 8, 2021
CVE-2024-12468
24Monitor
WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
androidbubbles · wp datepickerDec 24, 2024
CVE-2024-49629
24Monitor
WordPress Endless Posts Navigation plugin <= 2.2.7 - CSRF to Stored XSS vulnerability
MediumCVSS 6.1No exploitEPSS 0%
androidbubbles · endless posts navigationOct 20, 2024
CVE-2024-44042
19Monitor
WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 4.8No exploitEPSS 0%
- XSS
androidbubbles · wp datepickerOct 6, 2024