Skip to content

Vendor

elfden vulnerabilities

2 published CVES affecting elfden, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of elfden alerts

Products

Latest elfden CVEs

Newest publication first

  1. CVE-2016-0769 eShop <= 6.3.14 - Multiple SQL Injections

    Published
    HighCVSS 8.8 EPSS 2.9%

    Multiple SQL injection vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow (1) remote administrators to execute arbitrary SQL commands via the delid parameter or remote authenticated users to execute arbitrary SQL commands via the (2) view, (3) mark...

  2. CVE-2016-0765 eShop <= 6.3.14 - Multiple Cross-Site Scripting

    Published
    MediumCVSS 6.1 EPSS 1.8%

    Multiple cross-site scripting (XSS) vulnerabilities in eshop-orders.php in the eShop plugin 6.3.14 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) page or (2) action parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.