pluginops records
5 published records for vendor pluginops.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2023-48325No exploit | WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirectionpluginops · landing page builder · CWE-601 | Medium6.1 | — | 0.4% | Dec 7, 2023 |
21Monitor | CVE-2021-25067Proof of concept | Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)pluginops · landing page · CWE-79 | Medium5.4 | — | 1.1% | Jan 17, 2022 |
21Monitor | CVE-2022-4718No exploit | Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcodepluginops · landing page builder · CWE-79 | Medium5.4 | — | 0.5% | Jan 23, 2023 |
19Monitor | CVE-2023-40675No exploit | WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)pluginops · landing page builder · CWE-79 | Medium4.8 | — | 0.4% | Sep 27, 2023 |
19Monitor | CVE-2023-33328No exploit | WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS)pluginops · mailchimp subscribe form · CWE-79 | Medium4.8 | — | 0.4% | May 28, 2023 |
- CVE-2023-4832524Monitor
WordPress Landing Page Builder Plugin <= 1.5.1.5 is vulnerable to Open Redirection
MediumCVSS 6.1No exploitEPSS 0%pluginops · landing page builderDec 7, 2023
- CVE-2021-2506721Monitor
Landing Page Builder < 1.4.9.6 - Authenticated Reflected Cross-Site Scripting (XSS)
MediumCVSS 5.4Proof of conceptEPSS 1%pluginops · landing pageJan 17, 2022
- CVE-2022-471821Monitor
Landing Page Builder < 1.4.9.9 - Contributor+ Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%pluginops · landing page builderJan 23, 2023
- CVE-2023-4067519Monitor
WordPress Landing Page Builder Plugin <= 1.5.1.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%pluginops · landing page builderSep 27, 2023
- CVE-2023-3332819Monitor
WordPress MailChimp Subscribe Forms Plugin <= 4.0.9.1 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%pluginops · mailchimp subscribe formMay 28, 2023