Sign in Free assessment

flippercode records

3 published records for vendor flippercode.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

18
23
24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

3 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-2386No exploit	WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injectionflippercode · wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filters · CWE-89 SQL injection	High8.8	—	0.5%	Jun 29, 2024
21Monitor	CVE-2018-0577No exploit	Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary flippercode · wp google map · CWE-79 XSS	Medium5.4	—	0.8%	May 14, 2018
17Monitor	CVE-2021-4386No exploit	WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypassflippercode · wp-security-questions · CWE-352 Pre-auth CSRF	Medium4.3	—	0.4%	Jul 1, 2023

CVE-2024-2386
35Monitor
WordPress Plugin for Google Maps – WP MAPS <= 4.6.1 - Authenticated (Contributor+) SQL Injection
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
flippercode · wp maps – store locator,google maps,openstreetmap,mapbox,listing,directory & filtersJun 29, 2024
CVE-2018-0577
21Monitor
Cross-site scripting vulnerability in WP Google Map Plugin prior to version 4.0.4 for WordPress allows remote attackers to inject arbitrary
MediumCVSS 5.4No exploitEPSS 1%
- XSS
flippercode · wp google mapMay 14, 2018
CVE-2021-4386
17Monitor
WP Security Question <= 1.0.5 - Cross-Site Request Forgery Bypass
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
flippercode · wp-security-questionsJul 1, 2023