Artplacer Artplacer Widget — known CVE vulnerabilities

Every CVE whose affected-product data names Artplacer Artplacer Widget, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2023-6373 — CVSS 8.8 (high): The ArtPlacer Widget WordPress plugin before 2.20.7 does not sanitize and escape the "id" parameter before submitting the query, leading to…
• CVE-2023-7269 — CVSS 7.5 (high): The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as…
• CVE-2023-7268 — CVSS 6.5 (medium): The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay…