Bozdoz
4 CVEs across 5 Bozdoz products. Browse Bozdoz vulnerabilities, severities, and proof-of-concept exploits.
Bozdoz products with known CVEs
Bozdoz CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-39646 | Medium | 6.5 | 2026-04-08 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in bozdoz Leaflet Map leaflet-map allows Stored XSS.This iss… |
CVE-2025-32494 | Medium | 4.3 | 2025-04-09 | Cross-Site Request Forgery (CSRF) vulnerability in bozdoz reCAPTCHA Jetpack recaptcha-jetpack allows Cross Site Request Forgery.This issue affects reCAPTCHA Je… |
CVE-2025-22589 | High | 7.1 | 2025-01-07 | Cross-Site Request Forgery (CSRF) vulnerability in bozdoz Quote Tweet quote-tweet allows Stored XSS.This issue affects Quote Tweet: from n/a through <= 0.7. |
CVE-2024-3941 | Medium | 4.7 | 2024-05-14 | The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allo… |
CVE-2024-3940 | High | 8.8 | 2024-05-14 | The reCAPTCHA Jetpack WordPress plugin through 0.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged… |
CVE-2023-5050 | Medium | 6.4 | 2023-10-20 | The Leaflet Map plugin for WordPress is vulnerable to Stored Cross-Site Scripting via shortcodes in versions up to, and including, 3.3.0 due to insufficient in… |
CVE-2021-24468 | Medium | 5.4 | 2021-08-02 | The Leaflet Map WordPress plugin before 3.0.0 does not escape some shortcode attributes before they are used in JavaScript code or HTML, which could allow user… |