infornweb records

8 published records for vendor infornweb.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 12.5%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
41Plan	CVE-2023-5815Proof of concept	News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusioninfornweb · news \& blog designer pack · CWE-98 pre-auth RCE	Critical9.8	5.0%Nov 22, 2023
21Monitor	CVE-2021-24729No exploit	Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scriptinginfornweb · logo showcase with slick slider · CWE-79 XSS	Medium5.4	0.6%Nov 23, 2021
21Monitor	CVE-2022-4749No exploit	Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcodeinfornweb · posts list designer · CWE-79 XSS	Medium5.4	0.4%Jan 30, 2023
21Monitor	CVE-2022-4792No exploit	News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcodeinfornweb · news \& blog designer pack · CWE-79 XSS	Medium5.4	0.4%Jan 30, 2023
21Monitor	CVE-2024-23502No exploit	WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)infornweb · posts list designer by category · CWE-79 XSS	Medium5.4	0.3%Jan 31, 2024
19Monitor	CVE-2025-4567No exploit	Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSSinfornweb · post slider and post carousel · CWE-79 XSS	Medium4.8	0.2%Jun 3, 2025
17Monitor	CVE-2021-24913No exploit	Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRFinfornweb · logo showcase with slick slider · CWE-352 Pre-auth CSRF	Medium4.3	0.4%Feb 28, 2022
17Monitor	CVE-2021-24730No exploit	Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Updateinfornweb · logo showcase with slick slider · CWE-352 CSRF	Medium4.3	0.3%Feb 28, 2022

CVE-2023-5815
41Plan
News & Blog Designer Pack – WordPress Blog Plugin <= 3.4.1 - Unauthenticated Remote Code Execution via Local File Inclusion
CriticalCVSS 9.8Proof of conceptEPSS 5%
- pre-auth RCE
infornweb · news \& blog designer packNov 22, 2023
CVE-2021-24729
21Monitor
Logo Showcase with Slick Slider < 1.2.4 - Author+ Stored Cross Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
infornweb · logo showcase with slick sliderNov 23, 2021
CVE-2022-4749
21Monitor
Posts List Designer by Category < 3.2 - Contributor+ Stored XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
infornweb · posts list designerJan 30, 2023
CVE-2022-4792
21Monitor
News & Blog Designer Pack < 3.3 - Contributor+ Stored XSS via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
infornweb · news \& blog designer packJan 30, 2023
CVE-2024-23502
21Monitor
WordPress Posts List Designer by Category – List Category Posts Or Recent Posts Plugin <= 3.3.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
infornweb · posts list designer by categoryJan 31, 2024
CVE-2025-4567
19Monitor
Post Slider and Carousel with Widget < 3.2.10 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
infornweb · post slider and post carouselJun 3, 2025
CVE-2021-24913
17Monitor
Logo Showcase with Slick Slider < 2.0.1 - Arbitrary Media Title/Description/Alt Text/URL Update via CSRF
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
infornweb · logo showcase with slick sliderFeb 28, 2022
CVE-2021-24730
17Monitor
Logo Showcase with Slick Slider < 1.2.5 - Subscriber+ Arbitrary Media Title/Description/Alt Text/URL Update
MediumCVSS 4.3No exploitEPSS 0%
- CSRF
infornweb · logo showcase with slick sliderFeb 28, 2022