Sign in Free assessment

Codeboxr records

6 published records for vendor codeboxr.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 50%
Median publish → KEV: No record has entered KEV

Records by year

23
24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2022-4383No exploit	CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLicodeboxr · cbx petition for wordpress · CWE-89 Pre-auth SQL injection	Critical9.8	—	1.0%	Jan 23, 2023
35Monitor	CVE-2023-28747No exploit	WordPress CBX Currency Converter Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)codeboxr · cbx currency converter · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Nov 22, 2023
26Monitor	CVE-2024-32577No exploit	WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - Cross Site Scripting (XSS) vulnerabilitycodeboxr team · cbx bookmark & favorite · CWE-79 XSS	Medium6.5	—	0.3%	Apr 18, 2024
21Monitor	CVE-2023-47240No exploit	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)codeboxr · cbx map · CWE-79 XSS	Medium5.4	—	0.4%	Nov 16, 2023
21Monitor	CVE-2023-51514No exploit	WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)codeboxr · cbx bookmark \& favorite · CWE-79 XSS	Medium5.4	—	0.3%	Feb 1, 2024
21Monitor	CVE-2024-22297No exploit	WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)codeboxr · cbx map · CWE-79 XSS	Medium5.4	—	0.3%	Jan 31, 2024

CVE-2022-4383
39Monitor
CBX Petition for WordPress <= 1.0.3 - Unauthenticated SQLi
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- SQL injection
codeboxr · cbx petition for wordpressJan 23, 2023
CVE-2023-28747
35Monitor
WordPress CBX Currency Converter Plugin <= 3.0.3 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
codeboxr · cbx currency converterNov 22, 2023
CVE-2024-32577
26Monitor
WordPress CBX Bookmark & Favorite plugin <= 1.7.20 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 6.5No exploitEPSS 0%
- XSS
codeboxr team · cbx bookmark & favoriteApr 18, 2024
CVE-2023-47240
21Monitor
WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeboxr · cbx mapNov 16, 2023
CVE-2023-51514
21Monitor
WordPress CBX Bookmark & Favorite Plugin <= 1.7.13 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeboxr · cbx bookmark \& favoriteFeb 1, 2024
CVE-2024-22297
21Monitor
WordPress CBX Map for Google Map & OpenStreetMap Plugin <= 1.1.11 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
codeboxr · cbx mapJan 31, 2024