Wp-d3 Project Wp-d3 — known CVE vulnerabilities

Every CVE whose affected-product data names Wp-d3 Project Wp-d3, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2016-10946 — CVSS 8.8 (high): The wp-d3 plugin before 2.4.1 for WordPress has CSRF.
• CVE-2023-0536 — CVSS 5.4 (medium): The Wp-D3 WordPress plugin through 2.4.1 does not validate and escape some of its shortcode attributes before outputting them back in a…