barteled

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

barteled records in CISA KEV

No barteled vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-12409 CVE-2024-13367 · GHSA-33w9-gx86-5qvx

Sandbox <= 0.4 - Missing Authorization to Authenticated (Subscriber+) Sandbox Download

LOW 29

The Sandbox plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the export_download action in all versions up to, and including, 0.4.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00378 Published 2025-01-17 No fix listed CWE-862

TI-2024-12408 CVE-2024-13366 · GHSA-qmjx-4266-76c8

Sandbox <= 0.4 - Reflected Cross-Site Scripting

LOW 27

The Sandbox plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'debug' parameter in all versions up to, and including, 0.4 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0029 Published 2025-01-17 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0