Delower records
7 published records for vendor delower.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-352 Cross-Site Request Forgery (CSRF)3
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
21Monitor | CVE-2024-22292No exploit | WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)delower · wp to do · CWE-79 | Medium5.4 | — | 0.3% | Jan 31, 2024 |
21Monitor | CVE-2024-37539No exploit | WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerabilitydelower · wp to do · CWE-79 | Medium5.4 | — | 0.3% | Jul 6, 2024 |
19Monitor | CVE-2024-3944No exploit | WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Commentsdelower · wp to do · CWE-79 | Medium4.8 | — | 0.3% | Aug 29, 2024 |
19Monitor | CVE-2024-3946No exploit | WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settingsdelower · wp to do · CWE-79 | Medium4.8 | — | 0.3% | May 30, 2024 |
17Monitor | CVE-2024-3943No exploit | WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcommentdelower · wp to do · CWE-352 | Medium4.3 | — | 0.2% | May 30, 2024 |
17Monitor | CVE-2024-3945No exploit | WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()delower · wp to do · CWE-352 | Medium4.3 | — | 0.2% | May 30, 2024 |
17Monitor | CVE-2024-3947No exploit | WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settingsdelower · wp to do · CWE-352 | Medium4.3 | — | 0.2% | May 30, 2024 |
- CVE-2024-2229221Monitor
WordPress WP To Do Plugin <= 1.2.8 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%delower · wp to doJan 31, 2024
- CVE-2024-3753921Monitor
WordPress WP To Do plugin <= 1.3.0 - Cross Site Scripting (XSS) vulnerability
MediumCVSS 5.4No exploitEPSS 0%delower · wp to doJul 6, 2024
- CVE-2024-394419Monitor
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Task Comments
MediumCVSS 4.8No exploitEPSS 0%delower · wp to doAug 29, 2024
- CVE-2024-394619Monitor
WP To Do <= 1.3.0 - Authenticated (Admin+) Stored Cross-Site Scripting via Settings
MediumCVSS 4.8No exploitEPSS 0%delower · wp to doMay 30, 2024
- CVE-2024-394317Monitor
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_addcomment
MediumCVSS 4.3No exploitEPSS 0%delower · wp to doMay 30, 2024
- CVE-2024-394517Monitor
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_manage()
MediumCVSS 4.3No exploitEPSS 0%delower · wp to doMay 30, 2024
- CVE-2024-394717Monitor
WP To Do <= 1.3.0 - Cross-Site Request Forgery via wptodo_settings
MediumCVSS 4.3No exploitEPSS 0%delower · wp to doMay 30, 2024