Threat Entry Updated 2024-11-21

CVE-2024-31285 - WordPress Tooltips Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Tooltip WordPress Tooltips allows Stored XSS.This issue affects WordPress Tooltips: from n/a through 9.5.3.

PLUGIN WordPress Tooltips

CVE-2024-31285

HIGH CVSS 7.1 2024-04-11

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2024-30243 - WordPress Tooltips Plugin

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Tomas WordPress Tooltips.This issue affects WordPress Tooltips: from n/a before 9.4.5.

PLUGIN WordPress Tooltips

CVE-2024-30243

HIGH CVSS 8.5 2024-03-28

Risk Score

Open Full Technical Breakdown

Threat Entry Updated 2024-11-21

CVE-2023-25985 - Wordpress Tooltips Plugin

Cross-Site Request Forgery (CSRF) vulnerability in Tomas | Docs | FAQ | Premium Support WordPress Tooltips.This issue affects WordPress Tooltips: from n/a through 8.2.5.

PLUGIN Wordpress Tooltips

CVE-2023-25985

MEDIUM CVSS 4.3 2023-11-18

Risk Score

Open Full Technical Breakdown