Awesome Weather Widget
Approved changes feed: RSS · Atom
cpe:2.3:a:awesome_weather_widget_project:awesome_weather_widget:*:*:*:*:*:wordpress:*:*part: a version: * update: *
| Vendor | Awesome Weather Widget Project (2828f2f6-d02c-520f-a247-c531b614aa49) |
|---|---|
| Product | Awesome Weather Widget (18337983-d361-5191-9269-86c6ffdda27e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | wordpress |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4944 |
vulnerable | 2026-06-08 06:16:15.144437 |
Awesome Weather Widget <= 3.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
MEDIUM (6.4)
The Awesome Weather Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'awesome-weather' shortcode in versions up to, and including, 3.0.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Published: 2023-09-14T02:29:50.725Z
Updated: 2026-04-08T16:47:20.428Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-24474 |
vulnerable | 2026-06-08 05:30:04.441827 |
Awesome Weather Widget <= 3.0.2 - Reflected Cross-site Scripting (XSS)
The Awesome Weather Widget WordPress plugin through 3.0.2 does not sanitize the id parameter of its awesome_weather_refresh AJAX action, leading to an unauthenticated Reflected Cross-Site Scripting (XSS) Vulnerability.
Published: 2021-08-02T10:32:15.000Z
Updated: 2024-08-03T19:35:19.667Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.