Wp Custom Cursors Project Wp Custom Cursors — known CVE vulnerabilities

Every CVE whose affected-product data names Wp Custom Cursors Project Wp Custom Cursors, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-3150 — CVSS 7.2 (high): The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement…
• CVE-2023-2221 — CVSS 7.2 (high): The WP Custom Cursors WordPress plugin before 3.2 does not properly sanitise and escape a parameter before using it in a SQL statement…
• CVE-2022-3149 — CVSS 6.1 (medium): The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when creating and editing cursors, which could allow…
• CVE-2022-3151 — CVSS 4.3 (medium): The WP Custom Cursors WordPress plugin before 3.0.1 does not have CSRF check in place when deleting cursors, which could allow attackers to…