tooltipy project tooltipy vulnerabilities

Latest tooltipy project tooltipy CVEs

Newest publication first

1. CVE-2018-1000512 Tooltipy (tooltips for WP) <= 5.0 - Reflected Cross-Site Scripting

   Published 2018-06-26

   Medium·CVSS 6.1 EPSS 0.80%

   Tooltipy Tooltipy (tooltips for WP) version 5 contains a Cross Site Scripting (XSS) vulnerability in Glossary shortcode that can result in could allow anybody to do almost anything an admin can. This attack appear to be exploitable via Admin must follow a link. This vulnerability...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.