Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 68

Export CSV
CVE-2020-9392

An issue was discovered in the pricing-table-by-supsystic plugin before 1.8.2 for WordPress. Because there is no permission check on the ImportJSONTable, createFromTpl, and getJSONExportTable endpoints, unauthenticated users can retrieve pricing table information, create new tables, or import/modify a table.

CVSS 3.1 · 7.3 High EPSS 1.7% KEV · Not listed
Vendors
Supsystic
Products
Pricing Table By Supsystic
CVE-2020-12076

The data-tables-generator-by-supsystic plugin before 1.9.92 for WordPress lacks CSRF nonce checks for AJAX actions. One consequence of this is stored XSS.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Data Tables Generator
CVE-2016-10915

The popup-by-supsystic plugin before 1.7.9 for WordPress has CSRF.

CVSS 3.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Popup
CVE-2024-47330

Broken Access Control vulnerability on multiple WordPress plugins by Supsystic

Missing Authorization vulnerability in Supsystic Slider by Supsystic, Supsystic Social Share Buttons by Supsystic.This issue affects Slider by Supsystic: from n/a through 1.8.6; Social Share Buttons by Supsystic: from n/a through 2.2.9.

CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Vendors
Supsystic
Products
Slider Social Share Buttons