Wpdarko

13 CVEs across 5 Wpdarko products. Browse Wpdarko vulnerabilities, severities, and proof-of-concept exploits.

Wpdarko products with known CVEs

ProductCVEs
Team Members4
Responsive Pricing Table3
Responsive Tabs3
Top Bar2
Grid Shortcodes1
Wpdarko CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-4096Medium5.92024-07-30The Responsive Tabs WordPress plugin through 4.0.8 does not sanitise and escape some of its Tab settings, which could allow high privilege users such as Contri…
CVE-2024-1846Medium5.42024-04-15The Responsive Tabs WordPress plugin before 4.0.7 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wher…
CVE-2024-1660Medium4.82024-04-15The Top Bar WordPress plugin before 3.0.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform St…
CVE-2024-1658Medium5.42024-03-18The Grid Shortcodes WordPress plugin before 1.1.1 does not validate and escape some of its shortcode attributes before outputting them back in a page/post wher…
CVE-2024-1333Medium5.42024-03-18The Responsive Pricing Table WordPress plugin before 5.1.11 does not validate and escape some of its Pricing Table options before outputting them back in a pag…
CVE-2024-1331Medium6.12024-03-18The Team Members WordPress plugin before 5.3.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where t…
CVE-2023-4810Medium4.82023-11-06The Responsive Pricing Table WordPress plugin before 5.1.8 does not sanitise and escape some of its settings, which could allow high privilege users such as ad…
CVE-2022-46855Medium6.52023-03-28Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP Darko Responsive Pricing Table plugin <= 5.1.6 versions.
CVE-2022-3936Medium4.82023-01-02The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow high-privilege users such as editors to pe…
CVE-2022-2629Medium4.82022-10-10The Top Bar WordPress plugin before 3.0.4 does not sanitise and escape some of its settings before outputting them in frontend pages, which could allow high pr…
CVE-2022-1568Medium4.82022-05-30The Team Members WordPress plugin before 5.1.1 does not escape some of its Team settings, which could allow high privilege users such as admin to perform Cross…
CVE-2021-36893Medium4.82022-04-11Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Responsive Tabs (WordPress plugin) <= 4.0.5
CVE-2021-24128Medium5.42021-03-18Unvalidated input and lack of output encoding in the Team Members WordPress plugin, versions before 5.0.4, lead to Cross-site scripting vulnerabilities allowin…