Enhanced Text Widget vulnerabilities | LiveThreat CVE Feed

Product

Enhanced Text Widget

by cl272 · last CVE Dec 9, 2024

CVEs

On KEV

6.5

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 3Low 0

Severity

Exploitation

Watch

Add Enhanced Text Widget to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-0958	6.5	1%	Jul 28	Inisev Plugins (Various Versions) - Missing Authorization on handle_installation function Affected: through 1.5.7
CVE-2023-49192	5.3	0%	Dec 9	WordPress Enhanced Text Widget plugin <= 1.6.3 - Broken Access Control vulnerability Affected: through 1.6.3
CVE-2023-3977	4.3	1%	Jul 28	Inisev Plugins (Various Versions) - Cross-Site Request Forgery on handle_installation function Affected: through 1.5.7