Read the docs

AmentoTech Private Limited

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

AmentoTech Private Limited records in CISA KEV

No AmentoTech Private Limited vulnerabilities are listed in CISA KEV.

Records

5 records

TI-2024-32815 CVE-2024-49222 · GHSA-r8xj-278c-2qv8

WordPress WPGuppy plugin <= 1.1.0 - PHP Object Injection vulnerability

Priority HIGH 82

Deserialization of Untrusted Data vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Object Injection.This issue affects WPGuppy: from n/a through <= 1.1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00523 Published 2025-01-07 No fix listed CWE-502
TI-2024-37249 CVE-2024-56280 · GHSA-64r8-pvg5-v5f6

WordPress WPGuppy plugin <= 1.1.0 - Privilege Escalation vulnerability

Priority HIGH 77

Incorrect Privilege Assignment vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Privilege Escalation.This issue affects WPGuppy: from n/a through <= 1.1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00418 Published 2025-01-07 No fix listed CWE-266
TI-2025-31825 CVE-2025-49910 · GHSA-vm74-522r-gmh6

WordPress WPGuppy plugin <= 1.1.4 - Broken Access Control vulnerability

Priority MEDIUM 43

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WPGuppy: from n/a through <= 1.1.4.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00311 Published 2025-10-22 No fix listed CWE-862
TI-2025-22045 CVE-2025-30775 · GHSA-8c9h-3vrw-wm5g

WordPress WPGuppy plugin <= 1.1.3 - SQL Injection vulnerability

Priority LOW 37

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows SQL Injection.This issue affects WPGuppy: from n/a through <= 1…

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00497 Published 2025-03-27 No fix listed CWE-89
TI-2025-18360 CVE-2025-24643 · GHSA-p22x-7843-884q

WordPress WPGuppy plugin <= 1.1.0 - Broken Authentication vulnerability

Priority LOW 35

Missing Authorization vulnerability in AmentoTech Private Limited WPGuppy wpguppy-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPGuppy: from n/a through <= 1.1.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00404 Published 2025-02-03 No fix listed CWE-862
Open these records in search →