backie

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

backie records in CISA KEV

No backie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-eggdrop 2 records LOW Option Editor 1 record MEDIUM

Records

3 records

TI-2024-12873 CVE-2024-13852 · GHSA-577f-pjr8-g7hv

Option Editor <= 1.0 - Cross-Site Request Forgery to Arbitrary Options Update

MEDIUM 40

The Option Editor plugin for WordPress is vulnerable to Cross-Site Request Forgery in version 1.0.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00284 Published 2025-02-18 No fix listed CWE-352

TI-2024-02776 CVE-2024-2969 · GHSA-8vgq-xc89-pg94

WP-Eggdrop <= 0.1 - Cross-Site Request Forgery to Settings Update

LOW 24

The WP-Eggdrop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00189 Published 2024-03-29 No fix listed CWE-352

TI-2024-02775 CVE-2024-2968 · GHSA-x5jp-245w-xc3w

WP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting

LOW 22

The WP-Eggdrop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00319 Published 2024-03-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0