Webarxsecurity Webarx — known CVE vulnerabilities

Every CVE whose affected-product data names Webarxsecurity Webarx, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2019-17214 — CVSS 7.5 (high): The WebARX plugin 1.3.0 for WordPress allows firewall bypass by appending &cc=1 to a URI.
• CVE-2019-17213 — CVSS 6.1 (medium): The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header.