Sploitus

2 exploited vulnerabilities in The Weather Effect

Vulnerabilities with publicly known exploits

Vendors
WordPress
With known exploits
2
Affected Awplife Weather Effect versions
< 1.3.4, 1.3.6

Vulnerabilities with exploits

Highest CVSS first — 2 of these already have exploit code on Sploitus

CVE-2021-24683 1 exploit
CVSS 5.4 MEDIUM 2021-10-11FIX AVAILABLE
Weather Effect < 1.3.4 - CSRF to Stored Cross-Site Scripting
CVE-2021-24709 1 exploit
CVSS 4.8 MEDIUM 2021-10-11FIX AVAILABLE
Weather Effect < 1.3.6 - Admin+ Stored Cross-Site Scripting