Lucene search

WPmanage Security Vulnerabilities

cve

CVE-2022-3837

The Uji Countdown WordPress plugin before 2.3.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite...

4.8CVSS

4.7AI Score

0.001EPSS

2022-12-05 05:15 PM

cve

CVE-2023-23641

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WPmanage Uji Popup plugin <= 1.4.3...

6.5CVSS

5.2AI Score

0.0005EPSS

2023-05-16 10:15 AM

cve

CVE-2016-10900

The uji-countdown plugin before 2.0.7 for WordPress has...

6.1CVSS

6.4AI Score

0.001EPSS

2019-08-21 01:15 PM