Biplob Adhikari Vulnerabilities and Affected Products
Explore source-attributed vulnerabilities associated with Biplob Adhikari products.
Products
- Accordions – Multiple Accordions or FAQs Builder (WordPress plugin)2 vulnerabilities
- Image Hover Effects Ultimate (WordPress plugin)2 vulnerabilities
- Tabs (WordPress plugin)2 vulnerabilities
- Accordion – Multiple Accordion or FAQs Builder1 vulnerability
- Accordions1 vulnerability
- Accordions (WordPress plugin)1 vulnerability
- Flipbox (WordPress plugin)1 vulnerability
- Tabs1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-37120MEDIUM | WordPress Tabs plugin <= 4.0.6 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Tabs allows Stored XSS.This issue affects Tabs: from n/a through 4.0.6. CWE-79Jul 22, 2024 | CVSS5.9v3.1 | EPSS0.276% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-37122MEDIUM | WordPress Accordions plugin <= 2.3.5 - Cross Site Scripting (XSS) vulnerabilityImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Biplob Adhikari Accordions allows Stored XSS.This issue affects Accordions: from n/a through 2.3.5. CWE-79Jul 22, 2024 | CVSS5.9v3.1 | EPSS0.276% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-25962MEDIUM | WordPress Accordions Plugin <= 2.3.0 is vulnerable to Cross Site Scripting (XSS)Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari Accordion – Multiple Accordion or FAQs Builder plugin <= 2.3.0 versions. CWE-79May 4, 2023 | CVSS5.9v3.1 | EPSS0.369% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-42459HIGH | WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Auth. WordPress Options Change vulnerabilityAuth. WordPress Options Change vulnerability in Image Hover Effects Ultimate plugin <= 9.7.1 on WordPress. | CVSS7.2v3.1 | EPSS0.798% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilitiesMultiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key. CWE-79Nov 18, 2022 | CVSS3.4v3.1 | EPSS0.404% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2022-38104HIGH | WordPress Accordions plugin <= 2.0.3 - Auth. WordPress Options Change vulnerabilityAuth. WordPress Options Change (siteurl, users_can_register, default_role, admin_email and new_admin_email) vulnerability in Biplob Adhikari's Accordions – Multiple Accordions or FAQs Builder plugin (versions <= 2.0.3 on WordPress. CWE-264Oct 21, 2022 | CVSS7.2v3.1 | EPSS0.921% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
WordPress Tabs plugin <= 3.7.1 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilitiesMultiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities in Tabs plugin <= 3.7.1 at WordPress. CWE-79Sep 23, 2022 | CVSS3.4v3.1 | EPSS0.438% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX | |
CVE-2022-36375HIGH | WordPress Tabs plugin <= 3.6.0 - Authenticated WordPress Options Change vulnerabilityAuthenticated (high role user) WordPress Options Change vulnerability in Biplob Adhikari's Tabs plugin <= 3.6.0 at WordPress. CWE-264Jul 25, 2022 | CVSS7.2v3.1 | EPSS1.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-33969HIGH | WordPress Flipbox plugin <= 2.6.0 - Authenticated WordPress Options Change vulnerabilityAuthenticated WordPress Options Change vulnerability in Biplob Adhikari's Flipbox plugin <= 2.6.0 at WordPress. CWE-264Jul 25, 2022 | CVSS7.2v3.1 | EPSS1.24% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2022-33198CRITICAL | WordPress Accordions plugin <= 2.0.2 - Unauthenticated WordPress Options Change vulnerabilityUnauthenticated WordPress Options Change vulnerability in Biplob Adhikari's Accordions plugin <= 2.0.2 at WordPress. | CVSS9.8v3.1 | EPSS3.23% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei template | STIX |
CVE-2022-29424MEDIUM | WordPress Image Hover Effects Ultimate plugin <= 9.7.1 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerabilityAuthenticated (admin or higher user role) Reflected Cross-Site Scripting (XSS) vulnerability in Biplob Adhikari's Image Hover Effects Ultimate plugin <= 9.7.1 at WordPress. CWE-79May 20, 2022 | CVSS4.8v3.1 | EPSS0.509% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |