Read the docs

AWEOS GmbH

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

AWEOS GmbH records in CISA KEV

No AWEOS GmbH vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2025-02562 CVE-2025-2933 · GHSA-hvwq-39r8-6778

Email Notifications for Updates <= 1.1.6 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

Priority MEDIUM 40

The Email Notifications for Updates plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the awun_import_settings() function i…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00396 Published 2025-04-05 No fix listed CWE-862
TI-2025-30019 CVE-2025-47522 · GHSA-pvqf-2g4c-x85p

WordPress AWEOS WP Lock plugin <= 1.4.8 - Cross Site Scripting (XSS) Vulnerability

Priority LOW 26

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in AWEOS GmbH AWEOS WP Lock aweos-wp-lock allows Stored XSS.This issue affects AWEOS WP Lock: from n/a through <= 1.4.8.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.0028 Published 2025-05-07 No fix listed CWE-79
Open these records in search →