Vulnerabilities in web-dorado

4 results

CVE-2017-2224—Cross-site scripting vulnerability in Event Calendar WD prior to version 1.0.94 allows remote attackers to inject arbitrary web script or HTEPSS 1.5%CVE-2018-16164—Cross-site scripting vulnerability in Event Calendar WD version 1.1.21 and earlier allows remote authenticated attackers to inject arbitraryEPSS 1.2%CVE-2019-25734MEDIUMContact Form by WD 1.13.1 CSRF to Local File InclusionEPSS 0.9%CVE-2018-25347HIGHWordPress Contact Form Maker Plugin 1.12.20 SQL InjectionEPSS 0.2%