Read the docs

beeteam368

Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9

Exploited now

beeteam368 records in CISA KEV

No beeteam368 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

8 records

Priority MEDIUM 44

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 BeeTeam368 Extensions beeteam368-extensions allows PHP Local File Inclusion.This issue a…

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00569 Published 2025-08-14 No fix listed CWE-98
Priority MEDIUM 41

The BeeTeam368 Extensions plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation in the handle_submit_upload_file() function in all versions up to, and including, 2.3.5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00622 Published 2025-07-12 No fix listed CWE-434
Priority LOW 38

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidMov vidmov allows PHP Local File Inclusion.This issue affects VidMov: from n/a throug…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00709 Published 2025-08-14 No fix listed CWE-98
Priority LOW 35

Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in beeteam368 VidoRev vidorev allows PHP Local File Inclusion.This issue affects VidoRev: from n/a thr…

CVSS 3.1HIGH 7.5 Network Low privileges No interaction EPSS 0.00466 Published 2026-02-20 No fix listed CWE-98
Priority LOW 34

Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00344 Published 2026-01-08 No fix listed CWE-35
Priority LOW 30

The VidoRev Extensions plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'vidorev_import_single_video' AJAX action in all versions up to, and including, 2.9.9.9.9.9.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0028 Published 2025-03-14 No fix listed CWE-862
Open these records in search →