Gopiplus Jquery News Ticker — known CVE vulnerabilities

Every CVE whose affected-product data names Gopiplus Jquery News Ticker, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2023-5430 — CVSS 8.8 (high): The Jquery news ticker plugin for WordPress is vulnerable to SQL Injection via the plugin's shortcode in versions up to, and including, 3.0…
• CVE-2023-5432 — CVSS 6.4 (medium): The Jquery news ticker plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'jquery-news-ticker' shortcode in versions up…