VendorsViv Web Solutionsdynamic_widgetsall versions
Vulnerabilities

Viv Web Solutions Dynamic Widgets

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2015-10100
Dynamic Widgets Plugin dynwid_class.php sql injection
Published 2023-04-10 · Modified
9.8EPSS 0.011
CVE-2024-51669
WordPress Dynamic Widgets plugin <= 1.6.4 - Cross Site Request Forgery (CSRF) vulnerability
Published 2024-11-19 · Modified
8.8EPSS 0.002
CVE-2015-9437
The dynamic-widgets plugin before 1.5.11 for WordPress has CSRF with resultant XSS via the wp-admin/themes.php?page=dynwid-config page_limit parameter.
Published 2019-09-26 · Modified
6.5EPSS 0.009
CVE-2015-9436
The dynamic-widgets plugin before 1.5.11 for WordPress has XSS via the wp-admin/admin-ajax.php?action=term_tree prefix or widget_id parameter.
Published 2019-09-26 · Modified
5.4EPSS 0.010