webdevocean records
12 published records for vendor webdevocean.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 8.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')8
- CWE-862 Missing Authorization2
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-98 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
12 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2024-13592No exploit | Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusionwebdevocean · team-builder-for-wpbakery-page-builder · CWE-98 | High8.8 | — | 0.9% | Feb 19, 2025 |
35Monitor | CVE-2023-47552No exploit | WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)webdevocean · image hover effects · CWE-352 | High8.8 | — | 0.3% | Nov 18, 2023 |
24Monitor | CVE-2021-4363No exploit | WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scriptingwebdevocean · wp quick frontend editor · CWE-79 | Medium6.1 | — | 0.7% | Jun 6, 2023 |
21Monitor | CVE-2021-4378No exploit | WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scriptingwebdevocean · wp quick frontend editor · CWE-79 | Medium5.4 | — | 0.5% | Jun 6, 2023 |
21Monitor | CVE-2023-23681No exploit | WordPress Image Hover Effects For WPBakery Page Builder Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)webdevocean · image hover effects for wpbakery page builder · CWE-79 | Medium5.4 | — | 0.4% | Mar 30, 2023 |
21Monitor | CVE-2024-13591No exploit | Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebdevocean · team-builder-for-wpbakery-page-builder · CWE-79 | Medium5.4 | — | 0.4% | Feb 19, 2025 |
21Monitor | CVE-2024-30520No exploit | WordPress Carousel Anything For WPBakery Page Builder plugin <= 2.1 - Cross Site Scripting (XSS) vulnerabilitywebdevocean · carousel anything · CWE-79 | Medium5.4 | — | 0.3% | Mar 29, 2024 |
21Monitor | CVE-2024-13582No exploit | Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scriptingwebdevocean · pricing tables · CWE-79 | Medium5.4 | — | 0.2% | Feb 18, 2025 |
21Monitor | CVE-2024-13751No exploit | 3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scriptingwebdevocean · 3d photo gallery · CWE-79 | Medium5.4 | — | 0.2% | Feb 21, 2025 |
19Monitor | CVE-2022-4010No exploit | Image Hover Effects < 5.5 - Admin+ Stored XSSwebdevocean · image hover effects · CWE-79 | Medium4.8 | — | 0.5% | Dec 12, 2022 |
17Monitor | CVE-2021-4383No exploit | WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injectionwebdevocean · wp quick frontend editor · CWE-862 | Medium4.3 | — | 0.8% | Jun 6, 2023 |
17Monitor | CVE-2024-13687No exploit | Team Builder – Meet the Team <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Settings Updatewebdevocean · team builder · CWE-862 | Medium4.3 | — | 0.3% | Feb 18, 2025 |
- CVE-2024-1359235Monitor
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Local File Inclusion
HighCVSS 8.8No exploitEPSS 1%webdevocean · team-builder-for-wpbakery-page-builderFeb 19, 2025
- CVE-2023-4755235Monitor
WordPress Image Hover Effects Plugin <= 5.5 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%webdevocean · image hover effectsNov 18, 2023
- CVE-2021-436324Monitor
WP Quick FrontEnd Editor <= 5.5 - Reflected Cross-Site Scripting
MediumCVSS 6.1No exploitEPSS 1%webdevocean · wp quick frontend editorJun 6, 2023
- CVE-2021-437821Monitor
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webdevocean · wp quick frontend editorJun 6, 2023
- CVE-2023-2368121Monitor
WordPress Image Hover Effects For WPBakery Page Builder Plugin <= 4.0 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%webdevocean · image hover effects for wpbakery page builderMar 30, 2023
- CVE-2024-1359121Monitor
Team Builder For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webdevocean · team-builder-for-wpbakery-page-builderFeb 19, 2025
- CVE-2024-3052021Monitor
WordPress Carousel Anything For WPBakery Page Builder plugin <= 2.1 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%webdevocean · carousel anythingMar 29, 2024
- CVE-2024-1358221Monitor
Simple Pricing Tables For WPBakery Page Builder(Formerly Visual Composer) <= 1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webdevocean · pricing tablesFeb 18, 2025
- CVE-2024-1375121Monitor
3D Photo Gallery <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%webdevocean · 3d photo galleryFeb 21, 2025
- CVE-2022-401019Monitor
Image Hover Effects < 5.5 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 1%webdevocean · image hover effectsDec 12, 2022
- CVE-2021-438317Monitor
WP Quick FrontEnd Editor <= 5.5 - Authenticated (Subscriber+) Content Injection
MediumCVSS 4.3No exploitEPSS 1%webdevocean · wp quick frontend editorJun 6, 2023
- CVE-2024-1368717Monitor
Team Builder – Meet the Team <= 1.3 - Missing Authorization to Authenticated (Subscriber+) Settings Update
MediumCVSS 4.3No exploitEPSS 0%webdevocean · team builderFeb 18, 2025