Read the docs

Amini7

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Amini7 records in CISA KEV

No Amini7 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Zarinpal Paid Download 2 records MEDIUM

Records

2 records

TI-2024-12584 CVE-2024-13543 · GHSA-9fmx-g36w-qhc9

Zarinpal Paid Downloads <= 2.3 - Reflected XSS

Priority MEDIUM 60

The Zarinpal Paid Download WordPress plugin through 2.3 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privile…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00587 Published 2025-02-11 No fix listed CWE-79
TI-2024-12585 CVE-2024-13544 · GHSA-9m2c-327v-gghq

Zarinpal Paid Downloads <= 2.3 - Admin+ Arbitrary File Upload

Priority MEDIUM 55

The Zarinpal Paid Download WordPress plugin through 2.3 does not properly validate uploaded files, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00333 Published 2025-02-11 No fix listed CWE-434
Open these records in search →