Vendor/product archive

wow-company / bubble_menu CVEs

Beta · best-effort

3 CVEs tagged to wow-company / bubble_menu — 0 Critical, 0 High, 3 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to wow-company vendor archive

CVE-2023-3650

Published Aug 7, 2023

The Bubble Menu WordPress plugin before 3.0.5 does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site…

CVSS 4.8 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-2362

Published Jun 12, 2023

The Float menu WordPress plugin before 5.0.2, Bubble Menu WordPress plugin before 3.0.4, Button Generator WordPress plugin before 2.3.5, Calculator Builder WordPress plugin before…

CVSS 6.1 · Medium

evidence mentions: 1
Buzz score: 11.9

Vendor/product tagsBeta · best-effort

CVE-2023-23984

Published Mar 1, 2023

Cross-Site Request Forgery (CSRF) vulnerability in Wow-Company Bubble Menu – circle floating menu plugin <= 3.0.1 leading to form deletion.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1