ovation vulnerabilities

Products

• dynamic content 1
• dynamic content for elementor 1
• findme 1

Latest ovation CVEs

Newest publication first

1. CVE-2023-52150 WordPress Dynamic Content for Elementor Plugin < 2.12.5 is vulnerable to Cross Site Request Forgery (CSRF)

   Published 2024-01-05

   High·CVSS 8.8 EPSS 0.27%

   Cross-Site Request Forgery (CSRF) vulnerability in Ovation S.R.L. Dynamic Content for Elementor.This issue affects Dynamic Content for Elementor: from n/a before 2.12.5.

2. CVE-2021-3327 Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter.

   Published 2021-03-19

   Medium·CVSS 5.4 EPSS 0.66%

   Ovation Dynamic Content 1.10.1 for Elementor allows XSS via the post_title parameter.

3. CVE-2018-15885 Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or...

   Published 2018-08-26

   High·CVSS 7.5 EPSS 1.2%

   Ovation FindMe 1.4-1083-1 is intended to support transmission of network traffic from covert video recorders but does not properly disrupt binary analysis for discovering the product's capabilities or purpose. This makes it easier for adversaries to detect the covert operation. S...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.