backie

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

backie records in CISA KEV

No backie vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp-eggdrop 2 records LOW Option Editor 1 record MEDIUM

Records

2 records in Wp-eggdrop · all components

TI-2024-02776 CVE-2024-2969 · GHSA-8vgq-xc89-pg94

WP-Eggdrop <= 0.1 - Cross-Site Request Forgery to Settings Update

LOW 24

The WP-Eggdrop plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 0.1.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00189 Published 2024-03-29 No fix listed CWE-352

TI-2024-02775 CVE-2024-2968 · GHSA-x5jp-245w-xc3w

WP-Eggdrop <= 0.1 - Authenticated (Admin+) Stored Cross-Site Scripting

LOW 22

The WP-Eggdrop plugin for WordPress is vulnerable to Stored Cross-Site Scripting via admin settings in all versions up to, and including, 0.1 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00319 Published 2024-03-29 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0