TI-2024-01062 CVE-2024-1145 · GHSA-h7jv-6rq7-jwqh
Observable Response Discrepancy at Alma Devklan Blog
Priority LOW 31
User enumeration vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.
Devklan
Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
Devklan records in CISA KEVNo Devklan vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
5 records
TI-2026-20184 CVE-2026-24999 · GHSA-739q-666p-vgj7
WordPress Alma plugin <= 5.16.1 - Broken Access Control vulnerability
Priority LOW 30
Missing Authorization vulnerability in Alma Alma alma-gateway-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Alma: from n/a through <= 5.16.1.
TI-2024-01061 CVE-2024-1144 · GHSA-mwv8-7wjm-xvgf
Improper Access Control at Alma Devklan Blog
Priority LOW 29
Improper access control vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.
TI-2023-27555 CVE-2023-50369 · GHSA-8f5w-6f56-pffq
Cross-site scripting in Devklan Alma – Pay in installments or later for WooCommerce
Priority LOW 29
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alma Alma – Pay in installments or later for WooCommerce allows Stored XSS.This issue affects Alma – Pay in installmen…
TI-2024-01063 CVE-2024-1146 · GHSA-fv3m-jf9j-44vh
Cross-site Scripting at Alma Devklan Blog
Priority LOW 27
Cross-Site Scripting vulnerability in Devklan's Alma Blog that affects versions 2.1.10 and earlier.