WP Datepicker
Androidbubbles · 4 CVEs
CVE-2024-12468
MEDIUM
WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting
Dec 24, 2024
CVE-2024-47321
CRITICAL
WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability
Nov 1, 2024
CVE-2024-44042
MEDIUM
WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability
Oct 6, 2024
CVE-2024-3895
HIGH
WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update
May 2, 2024
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2024-12468 | WP Datepicker <= 2.1.4 - Reflected Cross-Site Scripting | MEDIUM | 0.48% | Dec 24, 2024 |
| CVE-2024-47321 | WordPress WP Datepicker plugin <= 2.1.1 - Broken Access Control vulnerability | CRITICAL | 0.41% | Nov 1, 2024 |
| CVE-2024-44042 | WordPress WP Datepicker plugin <= 2.1.1 - Cross Site Scripting (XSS) vulnerability | MEDIUM | 0.31% | Oct 6, 2024 |
| CVE-2024-3895 | WP Datepicker <= 2.1.0 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update | HIGH | 0.91% | May 2, 2024 |
Showing 1 to 4 of 4 CVEs