wpdevart Vulnerabilities and Affected Products - Exploit Intel

Skip to content

Products

Booking calendar, Appointment Booking System12 vulnerabilities
Responsive Image Gallery, Gallery Album5 vulnerabilities
Organization chart4 vulnerabilities
booking_calendar3 vulnerabilities
Gallery – Image and Video Gallery with Thumbnails3 vulnerabilities
Contact Form Builder, Contact Widget2 vulnerabilities
Responsive Vertical Icon Menu2 vulnerabilities
Widget Countdown2 vulnerabilities
YouTube Embed, Playlist and Popup by WpDevArt2 vulnerabilities
Booking Calendar Pro WpDevArt1 vulnerability
Coming soon and Maintenance mode1 vulnerability
Contact Form Builder1 vulnerability
Countdown and CountUp, WooCommerce Sales Timer1 vulnerability
Countdown and CountUp, WooCommerce Sales Timers1 vulnerability
Countdown Timer – Widget Countdown1 vulnerability
Image and Video Lightbox, Image PopUp1 vulnerability
Poll, Survey, Questionnaire and Voting system1 vulnerability
Poll, Survey, Questionnaire and Voting system (WordPress plugin)1 vulnerability
poll\,_survey\,_questionnaire_and_voting_system1 vulnerability
Pricing Table builder1 vulnerability

wpdevart vulnerability results
Vulnerability	Title and context	CVSS	EPSS	PoCs	Signals	STIX action
CVE-2023-23870MEDIUM	WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Scripting (XSS) Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 versions. CWE-79Apr 4, 2023	CVSS5.9v3.1	EPSS0.392%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX
CVE-2023-23983MEDIUM	WordPress Responsive Vertical Icon Menu Plugin <= 1.5.8 is vulnerable to Cross Site Request Forgery (CSRF) Cross-Site Request Forgery (CSRF) vulnerability in wpdevart Responsive Vertical Icon Menu plugin <= 1.5.8 can lead to theme deletion. CWE-352Feb 28, 2023	CVSS5.4v3.1	EPSS0.228%	PoCs0	SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates	STIX