Vulnerabilities > Vivwebsolutions
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2024-11-19 | CVE-2024-51669 | Cross-Site Request Forgery (CSRF) vulnerability in Vivwebsolutions Dynamic Widgets Cross-Site Request Forgery (CSRF) vulnerability in Vivwebs Dynamic Widgets.This issue affects Dynamic Widgets: from n/a through 1.6.4. | 8.8 |
| 2023-04-10 | CVE-2015-10100 | Unspecified vulnerability in Vivwebsolutions Dynamic Widgets A vulnerability, which was classified as critical, has been found in Dynamic Widgets Plugin up to 1.5.10 on WordPress. | 9.8 |
| 2019-09-26 | CVE-2015-9437 | Cross-Site Request Forgery (CSRF) vulnerability in Vivwebsolutions Dynamic Widgets The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter. | 6.5 |
| 2019-09-26 | CVE-2015-9436 | Cross-site Scripting vulnerability in Vivwebsolutions Dynamic Widgets The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter. | 5.4 |