Skip to content

Vendor

efence project vulnerabilities

1 published CVE affecting efence project, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of efence project alerts

Products

Latest efence project CVEs

Newest publication first

  1. CVE-2014-4526 efence <= 1.3.2 - Multiple Cross-Site Scripting

    Published
    MediumCVSS 4.3 EPSS 1.6%

    Multiple cross-site scripting (XSS) vulnerabilities in callback.php in the efence plugin 1.3.2 and earlier for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) message, (2) zoneid, (3) pubKey, or (4) privKey parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.