Joomlaserviceprovider Wsecure — known CVE vulnerabilities

Every CVE whose affected-product data names Joomlaserviceprovider Wsecure, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-10960 — CVSS 8.8 (high): The wsecure plugin before 2.4 for WordPress has remote code execution via shell metacharacters in the wsecure-config.php publish parameter.
• CVE-2023-39987 — CVSS 5.9 (medium): Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Ajay Lulia wSecure Lite plugin <= 2.5 versions.