CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2013-10030 – Exit Box Lite Plugin wordpress-exit-box-lite.php information disclosure
https://notcve.org/view.php?id=CVE-2013-10030
28 May 2013 — A vulnerability, which was classified as problematic, has been found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this issue is some unknown functionality of the file wordpress-exit-box-lite.php. The manipulation leads to information disclosure. The attack may be launched remotely. Upgrading to version 1.10 is able to address this issue. • https://github.com/wp-plugins/wordpress-exit-box-lite/commit/fad26701addb862c51baf85c6e3cc136aa79c309 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2013-10029 – Exit Box Lite Plugin wordpress-exit-box-lite.php exitboxadmin cross-site request forgery
https://notcve.org/view.php?id=CVE-2013-10029
28 May 2013 — A vulnerability classified as problematic was found in Exit Box Lite Plugin up to 1.06 on WordPress. Affected by this vulnerability is the function exitboxadmin of the file wordpress-exit-box-lite.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. Upgrading to version 1.10 is able to address this issue. • https://github.com/wp-plugins/wordpress-exit-box-lite/commit/fad26701addb862c51baf85c6e3cc136aa79c309 • CWE-352: Cross-Site Request Forgery (CSRF) •