Vulnerabilities (CVE)

Filtered by vendor Wpb Show Core Project Subscribe
Filtered by product Wpb Show Core
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-5974 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 N/A 9.8 CRITICAL
The WPB Show Core WordPress plugin through 2.2 is vulnerable to server-side request forgery (SSRF) via the `path` parameter.
CVE-2023-4922 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 N/A 9.8 CRITICAL
The WPB Show Core WordPress plugin through 2.2 is vulnerable to a local file inclusion via the `path` parameter.
CVE-2022-3484 1 Wpb Show Core Project 1 Wpb Show Core 2024-11-21 N/A 6.1 MEDIUM
The WPB Show Core WordPress plugin does not sanitize and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting.