Filtered by vendor Wpb Show Core Project Subscriptions
Total 3 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-5974 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 9.8 Critical
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
CVE-2023-4922 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 9.8 Critical
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter.
CVE-2022-3484 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 6.1 Medium
The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.