Known Vulnerabilities for products from A3rev
Listed below are 6 of the newest known vulnerabilities associated with the vendor "A3rev".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2023-29097 json | Auth. (author+) Stored Cross-Site Scripting (XSS) vulnerability in a3rev Software a3 Portfolio plugin <= 3.1.0 versions. | 4.8 - MEDIUM | 2023-08-14 | 2023-08-18 |
| CVE-2023-23973 json | Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Contact Us Page – Contact People plugin <= 3.7.0. | 6.5 - MEDIUM | 2023-03-01 | 2023-11-07 |
| CVE-2023-0095 json | The Page View Count WordPress plugin before 2.6.1 does not validate and escape some of its block options before outputting th... | 5.4 - MEDIUM | 2023-02-06 | 2023-11-07 |
| CVE-2022-40131 json | Cross-Site Request Forgery (CSRF) vulnerability in a3rev Software Page View Count plugin <= 2.5.5 on WordPress allows an atta... | 4.3 - MEDIUM | 2022-11-03 | 2022-11-04 |
| CVE-2022-0434 json | ** RESERVED ** This candidate has been reserved by an organization or individual that will use it when announcing a new secur... | 9.8 - CRITICAL | 2022-03-07 | 2022-03-11 |
| CVE-2021-24509 json | The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvc_stats shortcode, allowing users... | 5.4 - MEDIUM | 2021-08-09 | 2021-08-17 |