winwar records

7 published records for vendor winwar.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 85.7%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2023-23724No exploit	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)winwar · wp email capture · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	May 23, 2023
30Monitor	CVE-2023-28421No exploit	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposurewinwar · wp email capture · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Dec 21, 2023
24Monitor	CVE-2014-4525No exploit	Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for Wowinwar · wp ebay product feeds · CWE-79 Pre-auth XSS	Medium6.1	—	1.1%	Dec 27, 2019
21Monitor	CVE-2023-23728No exploit	WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)winwar · wp flipclock · CWE-79 XSS	Medium5.4	—	0.3%	Mar 23, 2023
19Monitor	CVE-2023-23722No exploit	WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)winwar · wp ebay product feeds · CWE-79 XSS	Medium4.8	—	0.3%	Mar 23, 2023
19Monitor	CVE-2023-23723No exploit	WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)winwar · wp email capture · CWE-79 XSS	Medium4.8	—	0.3%	May 2, 2023
19Monitor	CVE-2023-24005No exploit	WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)winwar · inline tweet sharer · CWE-79 XSS	Medium4.8	—	0.3%	Apr 25, 2023

CVE-2023-23724
35Monitor
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
winwar · wp email captureMay 23, 2023
CVE-2023-28421
30Monitor
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.10 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
winwar · wp email captureDec 21, 2023
CVE-2014-4525
24Monitor
Cross-site scripting (XSS) vulnerability in magpie/scripts/magpie_slashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for Wo
MediumCVSS 6.1No exploitEPSS 1%
- Pre-auth
- XSS
winwar · wp ebay product feedsDec 27, 2019
CVE-2023-23728
21Monitor
WordPress WP Flipclock Plugin <= 1.7.4 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 5.4No exploitEPSS 0%
- XSS
winwar · wp flipclockMar 23, 2023
CVE-2023-23722
19Monitor
WordPress WP eBay Product Feeds Plugin <= 3.3.1 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
winwar · wp ebay product feedsMar 23, 2023
CVE-2023-23723
19Monitor
WordPress WordPress Email Marketing Plugin – WP Email Capture Plugin <= 3.9.3 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
winwar · wp email captureMay 2, 2023
CVE-2023-24005
19Monitor
WordPress Inline Tweet Sharer – Twitter Sharing Plugin Plugin <= 2.5.3 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 4.8No exploitEPSS 0%
- XSS
winwar · inline tweet sharerApr 25, 2023