Read the docs

qriouslad

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

qriouslad records in CISA KEV

No qriouslad vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

4 records in Debug Log Manager · all components

Priority MEDIUM 40

The Debug Log Manager WordPress plugin before 2.3.0 contains a Directory listing vulnerability was discovered, which allows you to download the debug log without authorization and gain access to sensitive data

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00647 Published 2024-01-08 Fixed in 2.3.0 CWE-862
Priority LOW 20

The Debug Log Manager plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.2.1.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00259 Published 2023-11-30 No fix listed CWE-352
Open these records in search →