CVE-2023-23728: winwar wp flipclock – CVSS 5.4 · Watchpost

← All vulnerabilities

CVE-2023-23728

中危 5.4CVE-2023-23728 · Published 23/03/2023 · updated 17/06/2026

要点

CVE-2023-23728 是影响 wp flipclock (winwar) 的中危 (CVSS 5.4)漏洞。
未来 30 天内被利用的概率（EPSS）：0.39%，高于 33.7% 的漏洞。
修复：升级到 1.8 或更高版本。

Package	Affected versions	Patched versions
wp flipclock winwar	`< 1.8`	`1.8`

Description

Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Winwar Media WP Flipclock plugin <= 1.7.4 versions.

References

patchstack.com/database/vulnerability/wp-flipclock/wordpress-wp-flipclock-plugin-1-7-4-cross-site-scripting-xss-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free