Filtered by vendor Wp-d3 Project Subscriptions
Filtered by product Wp-d3 Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-0536 1 Wp-d3 Project 1 Wp-d3 2025-05-05 5.4 Medium
The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.
CVE-2016-10946 1 Wp-d3 Project 1 Wp-d3 2024-11-21 8.8 High
The wp-d3 plugin before 2.4.1 for WordPress has CSRF.