Bestwebsoft Quotes And Tips vulnerabilities

3 CVEs affecting Bestwebsoft Quotes And Tips, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-3112, published 2024-07-12.

More from Bestwebsoft.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-9385, published 2019-09-20. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. The quotes-and-tips plugin before 1.20 for WordPress has XSS.
• CVE-2017-2171, published 2017-05-22. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. Cross-site scripting vulnerability in Captcha prior to version 4.3.0, Car Rental prior to version 1.0.5, Contact Form Multi prior to version 1.2.1, Contact Form prior to version 4.0.6, Contact Form…
• CVE-2024-3112, published 2024-07-12. Medium severity, CVSS 4.8. EPSS: 0.4% chance of exploitation in the next 30 days. The Quotes and Tips by BestWebSoft WordPress plugin before 1.45 does not properly validate image files uploaded, allowing high privilege users such as admin to upload arbitrary files on the server…