Skip to content
Noroxi

gopiplus records

36 published records for vendor gopiplus.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 23
  2. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

36 records
  • CVE-2022-46818
    39Monitor

    WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to SQL Injection

    CriticalCVSS 9.8No exploitEPSS 0%

    gopiplus · email posts to subscribersNov 3, 2023

  • CVE-2023-5466
    35Monitor

    Wp anything slider <= 9.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    HighCVSS 8.8No exploitEPSS 1%

    gopiplus · wp anything sliderNov 22, 2023

  • CVE-2023-5465
    35Monitor

    Popup with fancybox <= 3.5 - Authenticated (Subscriber+) SQL Injection via Shortcode

    HighCVSS 8.8No exploitEPSS 0%

    gopiplus · popup with fancyboxNov 22, 2023

  • CVE-2023-4999
    35Monitor

    Horizontal scrolling announcement <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    HighCVSS 8.8No exploitEPSS 0%

    gopiplus · horizontal scrolling announcementOct 20, 2023

  • CVE-2023-5000
    35Monitor

    Horizontal scrolling announcements <= 2.4 - Authenticated (Contributor+) SQL Injection via Shortcode

    HighCVSS 8.8No exploitEPSS 0%

    gopiplus · horizontal scrolling announcementsAug 5, 2024

  • CVE-2023-47671
    35Monitor

    WordPress Vertical scroll recent post Plugin <= 14.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gopiplus · vertical scroll recent registered userNov 18, 2023

  • CVE-2023-25463
    35Monitor

    WordPress wp tell a friend popup form Plugin <= 7.1 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    gopiplus · wp-tell-a-friend-popup-formOct 3, 2023

  • CVE-2023-41735
    30Monitor

    WordPress Email posts to subscribers Plugin <= 6.2 is vulnerable to Sensitive Data Exposure

    HighCVSS 7.5No exploitEPSS 0%

    gopiplus · email posts to subscribersNov 30, 2023

  • CVE-2023-5412
    27Monitor

    Image horizontal reel scroll slideshow <= 13.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5Proof of conceptEPSS 1%

    gopiplus · image horizontal reel scroll slideshowOct 31, 2023

  • CVE-2023-5431
    26Monitor

    Left right image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · left right image slideshow galleryOct 31, 2023

  • CVE-2023-5433
    26Monitor

    Message ticker <= 9.2 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · message tickerOct 31, 2023

  • CVE-2023-5430
    26Monitor

    Jquery news ticker <= 3.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · jquery news tickerOct 31, 2023

  • CVE-2023-5429
    26Monitor

    Information Reel <= 10.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · information reelOct 31, 2023

  • CVE-2023-5428
    26Monitor

    Image vertical reel scroll slideshow <= 9.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · image vertical reel scroll slideshowOct 31, 2023

  • CVE-2023-5435
    26Monitor

    Up down image slideshow gallery <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · up down image slideshow galleryOct 31, 2023

  • CVE-2023-5437
    26Monitor

    WP fade in text news <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · wp fade in text newsOct 31, 2023

  • CVE-2023-5438
    26Monitor

    wp image slideshow <= 12.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · wp image slideshowOct 31, 2023

  • CVE-2023-5464
    26Monitor

    Jquery accordion slideshow <= 8.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · jquery accordion slideshowOct 31, 2023

  • CVE-2023-5439
    26Monitor

    Wp photo text slider 50 <= 8.0 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · wp photo text slider 50Oct 31, 2023

  • CVE-2023-5434
    26Monitor

    Superb slideshow gallery <= 13.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · superb slideshow galleryOct 31, 2023

  • CVE-2023-5436
    26Monitor

    Vertical marquee plugin <= 7.1 - Authenticated (Subscriber+) SQL Injection via Shortcode

    MediumCVSS 6.5No exploitEPSS 1%

    gopiplus · vertical marquee pluginOct 31, 2023

  • CVE-2023-36523
    21Monitor

    WordPress Email download link Plugin <= 3.7 is vulnerable to Sensitive Data Exposure

    MediumCVSS 5.3No exploitEPSS 0%

    gopiplus · email download linkNov 30, 2023

  • CVE-2023-5413
    21Monitor

    Image horizontal reel scroll slideshow <= 13.3 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    gopiplus · image horizontal reel scroll slideshowDec 18, 2023

  • CVE-2023-5432
    21Monitor

    Jquery news ticker <= 3.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    gopiplus · jquery news tickerDec 19, 2023

  • CVE-2023-5001
    21Monitor

    Horizontal scrolling announcement <= 9.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    gopiplus · horizontal scrolling announcementSep 16, 2023