GCVE - cpe:2.3:a:yannick_lefebvre:modal_dialog:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yannick_lefebvre:modal_dialog:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Yannick Lefebvre (`3c59b80c-a862-5cc2-9c0f-d6fea3a8ee71`)
Product	Modal Dialog (`caf525cb-7e05-5205-ac75-d101292a72b2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-32367`	vulnerable	2026-06-08 07:57:17.489096	WordPress Modal Dialog plugin <= 3.5.16 - Remote Code Execution (RCE) vulnerability CRITICAL (9.1) Improper Control of Generation of Code ('Code Injection') vulnerability in Yannick Lefebvre Modal Dialog modal-dialog allows Remote Code Inclusion.This issue affects Modal Dialog: from n/a through <= 3.5.16. Published: 2026-03-13T11:42:06.050Z Updated: 2026-04-29T09:51:57.847Z Open on db.gcve.eu Reference links https://patchstack.com/database/Wordpress/Plugin/modal-dialog/vulnerability/wordpress-modal-dialog-plugin-3-5-16-remote-code-execution-rce-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-31071`	vulnerable	2026-06-08 06:04:41.751945	WordPress Modal Dialog Plugin <= 3.5.14 is vulnerable to Cross Site Scripting (XSS) HIGH (7.1) Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.14 versions. Published: 2023-08-17T08:41:21.755Z Updated: 2026-04-28T16:08:20.205Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-14-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24001`	vulnerable	2026-06-08 05:56:04.968244	WordPress Modal Dialog Plugin <= 3.5.9 is vulnerable to Cross Site Scripting (XSS) MEDIUM (5.9) Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Yannick Lefebvre Modal Dialog plugin <= 3.5.9 versions. Published: 2023-04-06T07:50:15.807Z Updated: 2026-04-28T16:08:05.098Z Open on db.gcve.eu Reference links https://patchstack.com/database/vulnerability/modal-dialog/wordpress-modal-dialog-plugin-3-5-9-cross-site-scripting-xss-vulnerability?_s_id=cve	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.