{"schemaVersion":3,"id":"CVE-2021-24435","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues","dates":{"published":"2021-09-06T11:09:24.000Z","modified":"2024-08-03T19:28:23.965Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":6.1,"severity":"medium","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":4.3,"severity":"medium","vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"wordfence","score":6.1,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.01714,"percentile":0.77082,"severity":"low","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.01714},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01714,"percentile":0.77082}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.01714,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.01714,"percentile":0.77082}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_4F2D69D18951F138","name":"Exploit Reference (wpscan.com)","source":"reference","url":"https://wpscan.com/vulnerability/a88ffc42-6611-406e-8660-3af24c9cc5e8","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null}],"exploitCount":1,"weaknesses":[{"id":"CWE-79","name":"Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')","description":"The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/79.html"}],"affected":[{"vendor":"gambit","product":"titan_framework","name":"titan framework","label":"titan_framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"≤ 1.12.1","eol":null,"hubHref":"/vendor/gambit/titan_framework"},{"vendor":"unknown","product":"titan framework","name":"Titan Framework","label":"titan framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.12.1","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.12.1","eol":null,"hubHref":"/vendor/unknown/titan_framework"},{"vendor":"wordpress","product":"4k-icon-fonts-for-visual-composer","name":"4k-icon-fonts-for-visual-composer","label":"4k-icon-fonts-for-visual-composer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"adblock-notify-by-bweb","name":"Ad Blocker Notify Lite","label":"adblock-notify-by-bweb","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"affiliate-pro","name":"affiliate-pro","label":"affiliate-pro","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"amp-extensions","name":"AMP extensions","label":"amp-extensions","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"aoi-tori","name":"Aoi Tori","label":"aoi-tori","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"awesome-support","name":"Awesome Support – WordPress HelpDesk & Support Plugin","label":"awesome-support","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 6.0.10 (fixed in 6.0.11)","noFixRecorded":false,"fixedIn":"6.0.11"}],"versionsText":"≤ 6.0.10 (fixed in 6.0.11)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"betteroptin","name":"betteroptin","label":"betteroptin","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"border-loading-bar","name":"Border Loading Bar","label":"border-loading-bar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"catchers-helpdesk","name":"Catchers Helpdesk and Ticket system for Support","label":"catchers-helpdesk","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"categories-gallery","name":"Bootstrap Categories Gallery","label":"categories-gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"categories-gallery-woocommerce","name":"Woocommerce Categories in gallery format","label":"categories-gallery-woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"cf7-customizer","name":"WordPress Form Customizer | CF7 Customizer","label":"cf7-customizer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"clinicalwp-core","name":"ClinicalWP Core","label":"clinicalwp-core","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"cool-facebook-page-feed-timeline","name":"Facebook Page Feed Timeline","label":"cool-facebook-page-feed-timeline","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"custom-scroll-bar-designer","name":"Custom Scrollbar Designer","label":"custom-scroll-bar-designer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"custom-text-selection-colors","name":"Custom Text Selection Colors","label":"custom-text-selection-colors","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"disable-image-right-click","name":"Disable Image Right Click","label":"disable-image-right-click","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-gallery-slideshow","name":"Easy Gallery Slideshow","label":"easy-gallery-slideshow","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-google-map","name":"Easy Google Map","label":"easy-google-map","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"easy-justified-gallery","name":"Easy Justified Gallery – Photo Gallery Block with Lightbox","label":"easy-justified-gallery","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.1 (fixed in 1.1.1)","noFixRecorded":false,"fixedIn":"1.1.1"}],"versionsText":"≤ 1.1 (fixed in 1.1.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"email-my-posts","name":"Share Posts To Email","label":"email-my-posts","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"exit-popup-show","name":"Exit Popup Show","label":"exit-popup-show","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"flight-search-widget-blocks","name":"Flight Search Widget and Blocks","label":"flight-search-widget-blocks","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"icons-with-links-widget","name":"Icons with Links Widget","label":"icons-with-links-widget","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"icustomizer","name":"ICustomizer","label":"icustomizer","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 1.4.13 (fixed in 1.5.0)","noFixRecorded":false,"fixedIn":"1.5.0"}],"versionsText":"≤ 1.4.13 (fixed in 1.5.0)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"live-chat-facebook-fanpage","name":"Live Chat for Fanpage","label":"live-chat-facebook-fanpage","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 3.1.0 (fixed in 3.1.1)","noFixRecorded":false,"fixedIn":"3.1.1"}],"versionsText":"≤ 3.1.0 (fixed in 3.1.1)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"media-mirror","name":"Media Mirror","label":"media-mirror","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"mobile-menu","name":"WP Mobile Menu – The Mobile-Friendly Responsive Menu","label":"mobile-menu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"≤ 2.8.2.2 (fixed in 2.8.2.3)","noFixRecorded":false,"fixedIn":"2.8.2.3"}],"versionsText":"≤ 2.8.2.2 (fixed in 2.8.2.3)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"popup-modal-for-youtube","name":"Popup Modal For Youtube","label":"popup-modal-for-youtube","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"project-app","name":"Project2App – Turn Your WordPress Site into an Android App","label":"project-app","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"seatgeek-affiliate-tickets","name":"Seatgeek Affiliate Tickets","label":"seatgeek-affiliate-tickets","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"seo-dashboard-by-gutewebsites-de","name":"SEO-Dashboard by gutewebsites.de","label":"seo-dashboard-by-gutewebsites-de","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"share-woocommerce-email","name":"Share Woocommerce to Email","label":"share-woocommerce-email","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"simple-behace-portfolio","name":"Simple Behance Portfolio","label":"simple-behace-portfolio","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"stars-menu","name":"Stars Menu","label":"stars-menu","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"station-pro","name":"Station Pro – Advanced Audio Streaming & Player for WordPress","label":"station-pro","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2.2.1 (fixed in 2.2.2)","noFixRecorded":false,"fixedIn":"2.2.2"}],"versionsText":"2.2.1 (fixed in 2.2.2)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"sticky-related-posts","name":"Sticky Related Posts","label":"sticky-related-posts","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"tcs3","name":"tcS3","label":"tcs3","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"template-events-calendar","name":"Events Shortcodes For The Events Calendar","label":"template-events-calendar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.7.2","noFixRecorded":false,"fixedIn":"1.7.2"}],"versionsText":"< 1.7.2","eol":null,"hubHref":null},{"vendor":"wordpress","product":"titan-framework","name":"Titan Framework","label":"titan-framework","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"total-sales-for-woocommerce","name":"Total Sales For Woocommerce","label":"total-sales-for-woocommerce","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"tr-easy-google-analytics","name":"TR Easy Google Analytics","label":"tr-easy-google-analytics","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"venture-event-manager","name":"Venture Event Manager","label":"venture-event-manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 3.2.5","noFixRecorded":false,"fixedIn":"3.2.5"}],"versionsText":"< 3.2.5","eol":null,"hubHref":null},{"vendor":"wordpress","product":"w3s-cf7-zoho","name":"W3SCloud Contact Form 7 to Zoho CRM","label":"w3s-cf7-zoho","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.1.0","noFixRecorded":false,"fixedIn":"2.1.0"}],"versionsText":"< 2.1.0","eol":null,"hubHref":null},{"vendor":"wordpress","product":"webhotelier","name":"WebHotelier for WordPress","label":"webhotelier","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 1.6.1","noFixRecorded":false,"fixedIn":"1.6.1"}],"versionsText":"< 1.6.1","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-availability-date","name":"Product Limited Time Availability Date for woocommerce","label":"woo-availability-date","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woo-whatsapp-request-quote","name":"Request Quote via Whatsapp for Woocommerce","label":"woo-whatsapp-request-quote","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"woosaleskit-bar","name":"Woosaleskit Bar","label":"woosaleskit-bar","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"All versions","noFixRecorded":true,"fixedIn":null}],"versionsText":"All versions (No fix recorded)","eol":null,"hubHref":null},{"vendor":"wordpress","product":"yandex-money-button","name":"Кнопка ЮMoney","label":"yandex-money-button","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 2.4.0","noFixRecorded":false,"fixedIn":"2.4.0"}],"versionsText":"< 2.4.0","eol":null,"hubHref":null}],"affectedCount":51,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://wpscan.com/vulnerability/a88ffc42-6611-406e-8660-3af24c9cc5e8","label":"wpscan.com/vulnerability/a88ffc42-6611-406e-8660-3af24c9cc5e8","hostname":"wpscan.com","tags":["X Refsource MISC","Exploit","Third Party Advisory"]},{"url":"https://www.wordfence.com/threat-intel/vulnerabilities/id/fcae647f-7eed-4ecd-83b8-482b55b86ec9","label":"www.wordfence.com/threat-intel/vulnerabilities/id/fcae647f-7eed-4ecd-83b8-482b55b86ec9","hostname":"www.wordfence.com","tags":["Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2021-09-06T11:09:24.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-03T19:28:23.965Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":35,"level":"medium","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-21T01:57:21.727Z","stale":false,"partial":false}}