Read the docs

AccessAlly

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

AccessAlly records in CISA KEV

No AccessAlly vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Popupally 3 records MEDIUM Accessally 1 record MEDIUM

Records

1 record in Accessally · all components

TI-2021-06518 CVE-2021-24226 · GHSA-3hqr-g258-rfxm

AccessAlly < 3.5.7 - $_SERVER Superglobal Leakage

Priority MEDIUM 41

In the AccessAlly WordPress plugin before 3.5.7, the file "resource/frontend/product/product-shortcode.php" responsible for the [accessally_order_form] shortcode is dumping serialize($_SERVER), which contains all environ…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05259 Published 2021-04-12 Fixed in 3.5.7 CWE-200
Open these records in search →