The Wp Smiley Project maintains a narrowly scoped WordPress plugin where the observable vulnerability pattern centers on web-application input handling, with documented exposures in cross-site request forgery and cross-site scripting. This profile reflects the typical attack surface of WordPress plugins, where client-side trust boundaries and form-state validation present recurrent risk; current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Wp Smiley Project over time
Signals from CVEs in this vendor scope (2 CVEs).
2 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2015-4140MEDIUM Cross-site request forgery (CSRF) vulnerability in the WP Smiley plugin 1.4.1 for WordPress allows remote attackers to hijack the authentication of editors for requests that conduc | Jun 18, 2015 | 6.8 | 18 | NO | NO |
Cross-site scripting (XSS) vulnerability in smilies4wp.php in the WP Smiley plugin 1.4.1 for WordPress allows remote authenticated users to inject arbitrary web script or HTML via | Jun 18, 2015 | 3.5 | 13 | NO | NO |
Signals from CVEs in this vendor scope (2 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Wp Smiley Project.
Media articles that mention a CVE ID that affects a product developed by Wp Smiley Project — matched by CVE ID, not by vendor name.