10up

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

10up records in CISA KEV

No 10up vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Elasticpress · all components

TI-2021-03262 CVE-2021-4405 · GHSA-vf57-4qjx-vrj8

LOW 20

The ElasticPress plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.5.3.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0039 Published 2023-07-01 No fix listed CWE-352

TI-2024-23553 CVE-2024-35684 · GHSA-34vg-2vxp-rvgw

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in 10up ElasticPress elasticpress.This issue affects ElasticPress: from n/a through <= 5.1.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00185 Published 2024-06-08 No fix listed CWE-352