Wpmudev Custom Sidebars vulnerabilities

2 CVEs affecting Wpmudev Custom Sidebars, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-18511, published 2019-08-14.

More from Wpmudev.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-18511, published 2019-08-14. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. The custom-sidebars plugin before 3.0.8.1 for WordPress has CSRF.
• CVE-2017-18510, published 2019-08-14. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. The custom-sidebars plugin before 3.1.0 for WordPress has CSRF related to set location, import actions, and export actions.