Bestwebsoft Portfolio vulnerabilities

3 CVEs affecting Bestwebsoft Portfolio, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-125109, published 2023-12-26.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2017-2171, published 2017-05-22. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form…
CVE-2014-125109, published 2023-12-26. Medium severity, CVSS 6.1. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.27. It has been declared as problematic. This vulnerability affects the function bws_add_menu_render of the file…
CVE-2012-10017, published 2023-12-26. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in BestWebSoft Portfolio Plugin up to 2.04 on WordPress. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request…