Skip to content
Noroxi

mekshq records

7 published records for vendor mekshq.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
28.6%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2023-25989
    35Monitor

    Cross-Site Request Forgery (CSRF) vulnerability in multiple WordPress plugins by Meks

    HighCVSS 8.8No exploitEPSS 0%

    mekshq · meks audio playerOct 3, 2023

  • CVE-2021-24958
    21Monitor

    Meks Easy Photo Feed Widget < 1.2.4 - Subscriber+ Settings Update to Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    mekshq · meks easy photo feed widgetMar 14, 2022

  • CVE-2022-4562
    21Monitor

    Meks Flexible Shortcodes < 1.3.5 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    mekshq · meks flexible shortcodesFeb 13, 2023

  • CVE-2024-37958
    21Monitor

    WordPress Meks Smart Author Widget plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    mekshq · meks smart author widgetJul 20, 2024

  • CVE-2024-37548
    21Monitor

    WordPress Meks Easy Ads Widget plugin <= 2.0.8 - Cross Site Scripting (XSS) vulnerability

    MediumCVSS 5.4No exploitEPSS 0%

    mekshq · meks easy ads widgetJul 21, 2024

  • CVE-2022-2574
    19Monitor

    Meks Easy Social Share < 1.2.8 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    mekshq · meks easy social shareOct 17, 2022

  • CVE-2024-0664
    19Monitor

    Meks Smart Social Widget <= 1.6.3 - Authenticated (Admin+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    mekshq · meks smart social widgetJan 27, 2024