Awesome Weather Widget Project Awesome Weather Widget — known CVE vulnerabilities

Every CVE whose affected-product data names Awesome Weather Widget Project Awesome Weather Widget, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-4944 — CVSS 6.4 (medium): The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up…
• CVE-2021-24474 — CVSS 6.1 (medium): The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action…