Vendors / BerqWP Records 4 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 1
CVSS high 1
Exploited now BerqWP records in CISA KEV No BerqWP vulnerabilities are listed in CISA KEV.
Priority MEDIUM 56
Unrestricted Upload of File with Dangerous Type vulnerability in BerqWP allows Code Injection.This issue affects BerqWP: from n/a through 1.7.6.
CVSS 3.1 CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.04586 · Published 2024-08-13 · No fix listed CWE-434
Priority LOW 39
The BerqWP – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type validation via…
CVSS 3.1 HIGH 8.1· Network · No auth · No interaction · EPSS 0.0103 · Published 2025-08-01 · No fix listed CWE-434
Priority LOW 30
Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00294 · Published 2026-09-17 · No fix listed CWE-862
Priority LOW 29
Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through <= 2.2.53.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.00218 · Published 2025-09-09 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
1 1 2 0 0
THREATIST.IORead the docs