Awesome Weather Widget

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Awesome Weather Widget

Information

Software Type Plugin
Software Slug awesome-weather (view on wordpress.org)
Software Status Removed
Software Author richardgabriel
Software Website halgatewood.com
Software Downloads 556,483
Software Active Installs 30,000
Software Record Last Updated November 28, 2023

2 Vulnerabilities

Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
6.4
CVE-2023-4944
Sep 13, 2023
Researcher: István Márton
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting via id Parameter
6.1
CVE-2021-24474
Jun 28, 2021
Researcher: Truoc Phan
Title CVE ID CVSS Researchers Date
Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode CVE-2023-4944 6.4 István Márton September 13, 2023
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting via id Parameter CVE-2021-24474 6.1 Truoc Phan June 28, 2021

All the threat data shared in this database is powered by Wordfence Intelligence Enterprise.
Interested in integrating this data into your platform or network?
Contact us now to discuss API access to our Wordfence Intelligence Enterprise Data Feeds.

Inquire Now

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation