PatchTheCVEnextendweb vulnerabilities
Recent CVEs affecting nextendweb products. 2 tracked.
nextendweb has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2024-03-02. Highest priority: CVE-2024-1775 (score 27/100).
- CVE-2024-1775 MEDIUM 5.4 UPGRADE The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site
- CVE-2022-45845 MEDIUM 4.3 UPGRADE Deserialization of Untrusted Data vulnerability in Nextend Smart Slider 3.This issue affects Smart Slider 3: f
FAQ
How do I fix nextendweb vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is nextendweb being exploited right now?
None of the tracked nextendweb CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which nextendweb CVE should I patch first?
CVE-2024-1775 currently ranks highest (27/100): The Nextend Social Login and Register plugin for WordPress is vulnerable to a self-based Reflected Cross-Site .