Stockdio records
3 published records for vendor Stockdio.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
24Monitor | CVE-2020-28707Proof of concept | The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_chart_historical-wp.jstockdio · stockdio historical chart · CWE-79 | Medium6.1 | 1.0%Jan 19, 2021 |
21Monitor | CVE-2023-41666No exploit | WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)stockdio · stock quotes list · CWE-79 | Medium5.4 | 0.3%Sep 29, 2023 |
21Monitor | CVE-2024-13349No exploit | Stockdio Historical Chart <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scriptingstockdio · stockdio historical chart · CWE-79 | Medium5.4 | 0.3%Jan 30, 2025 |
- CVE-2020-2870724Monitor
The Stockdio Historical Chart plugin before 2.8.1 for WordPress is affected by Cross Site Scripting (XSS) via stockdio_chart_historical-wp.j
MediumCVSS 6.1Proof of conceptEPSS 1%stockdio · stockdio historical chartJan 19, 2021
- CVE-2023-4166621Monitor
WordPress Stock Quotes List Plugin <= 2.9.9 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%stockdio · stock quotes listSep 29, 2023
- CVE-2024-1334921Monitor
Stockdio Historical Chart <= 2.8.18 - Authenticated (Contributor+) Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%stockdio · stockdio historical chartJan 30, 2025