sevenspark records

4 published records for vendor sevenspark.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	EPSS · Published
21Monitor	CVE-2023-5164No exploit	Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcodesevenspark · bellows accordion menu · CWE-79 XSS	Medium5.4	0.5%Oct 30, 2023
21Monitor	CVE-2022-4627No exploit	ShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcodesevenspark · shiftnav · CWE-79 XSS	Medium5.4	0.4%Jan 23, 2023
21Monitor	CVE-2024-3593No exploit	UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Resetsevenspark · ubermenu · CWE-352 Pre-auth CSRF	Medium5.4	0.1%Jun 22, 2024
17Monitor	CVE-2024-10084No exploit	Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcodesevenspark · contact form 7 - dynamic text extension · CWE-200 Info leak	Medium4.3	0.3%Nov 5, 2024

CVE-2023-5164
21Monitor
Bellows Accordion Menu <= 1.4.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
sevenspark · bellows accordion menuOct 30, 2023
CVE-2022-4627
21Monitor
ShiftNav – Responsive Mobile Menu < 1.7.2 - Contributor+ Stored XSS in Shortcode
MediumCVSS 5.4No exploitEPSS 0%
- XSS
sevenspark · shiftnavJan 23, 2023
CVE-2024-3593
21Monitor
UberMenu <= 3.8.3 - Cross-Site Request Forgery to Settings Reset
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- CSRF
sevenspark · ubermenuJun 22, 2024
CVE-2024-10084
17Monitor
Contact Form 7 – Dynamic Text Extension <= 4.5 - Information Disclosure via Shortcode
MediumCVSS 4.3No exploitEPSS 0%
- Info leak
sevenspark · contact form 7 - dynamic text extensionNov 5, 2024