Read the docs

brandexponents

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

brandexponents records in CISA KEV

No brandexponents vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tatsu 1 record HIGH

Records

1 record in Tatsu · all components

TI-2021-07372 CVE-2021-25094 · GHSA-grmv-gp4f-w59q

Tatsu < 3.3.12 - Unauthenticated RCE

Priority HIGH 76

The Tatsu WordPress plugin before 3.3.12 add_custom_font action can be used without prior authentication to upload a rogue zip file which is uncompressed under the WordPress's upload directory.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.83232 Published 2022-04-25 Fixed in 3.3.12 CWE-306
Open these records in search →