Tribulant vulnerabilities and threats

7 threats

Severity	CVSS	Signals	Threat	Source	Published
High	7.1	EPSS 0.3%	CVE-2024-43279Newsletters (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-08-18CVE Database V5CVE-2024-43279 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.8. EPSS 0.3%Vulnerability Tribulant CWE-79	CVE Database V5	2024-08-18
Medium	4.3	EPSS 0.2%	CVE-2024-37227Newsletters (WordPress plugin) · Cross Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-06-21CVE Database V5CVE-2024-37227 Cross Site Request Forgery (CSRF) vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.7. EPSS 0.2%Vulnerability Tribulant CWE-352	CVE Database V5	2024-06-21
High	7.1	EPSS 0.3%	CVE-2024-35718Newsletters (WordPress plugin) · XSS or 'Cross-site Scripting' High7.1EPSS 0.3%2024-06-08CVE Database V5CVE-2024-35718 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tribulant Newsletters allows Reflected XSS.This issue affects Newsletters: from n/a through 4.9.5. EPSS 0.3%Vulnerability Tribulant CWE-79	CVE Database V5	2024-06-08
Critical	9.1	EPSS 0.6%	CVE-2024-32954Newsletters (WordPress plugin) · Unrestricted File Upload Critical9.1EPSS 0.6%2024-04-24CVE Database V5CVE-2024-32954 Unrestricted Upload of File with Dangerous Type vulnerability in Tribulant Newsletters.This issue affects Newsletters: from n/a through 4.9.5. EPSS 0.6%Vulnerability Tribulant CWE-434	CVE Database V5	2024-04-24
Medium	4.3	EPSS 0.2%	CVE-2024-31354Slideshow Gallery (WordPress plugin) · Cross-Site Request Forgery (CSRF) Medium4.3EPSS 0.2%2024-04-12CVE Database V5CVE-2024-31354 Cross-Site Request Forgery (CSRF) vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. EPSS 0.2%Vulnerability Tribulant CWE-352	CVE Database V5	2024-04-12
High	8.5	EPSS 0.5%	CVE-2024-31355Slideshow Gallery (WordPress plugin) · SQL Injection High8.5EPSS 0.5%2024-04-10CVE Database V5CVE-2024-31355 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. EPSS 0.5%Vulnerability Tribulant CWE-89	CVE Database V5	2024-04-10
Medium	5.3	EPSS 0.5%	CVE-2024-31353Slideshow Gallery (WordPress plugin) · Sensitive Data in Logs Medium5.3EPSS 0.5%2024-04-10CVE Database V5CVE-2024-31353 Insertion of Sensitive Information into Log File vulnerability in Tribulant Slideshow Gallery.This issue affects Slideshow Gallery: from n/a through 1.7.8. EPSS 0.5%Vulnerability Tribulant CWE-532	CVE Database V5	2024-04-10

Page 1 of 1