Read the docs

Bravenewcode

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

Bravenewcode records in CISA KEV

No Bravenewcode vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wptouch 4 records HIGH

Records

4 records in Wptouch · all components

TI-2022-03154 CVE-2022-3416 · GHSA-m7v9-fq6q-w2wp

WPtouch < 4.3.45 - Admin+ Arbitrary File Upload

Priority HIGH 67

The WPtouch WordPress plugin before 4.3.45 does not properly validate images to be uploaded, allowing high privilege users such as admin to upload arbitrary files on the server even when they should not be allowed to (fo…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.17285 Published 2023-01-09 Fixed in 4.3.45
TI-2022-03155 CVE-2022-3417 · GHSA-6rpp-h47m-wx9v

WPtouch < 4.3.45 - Admin+ PHP Object Injection

Priority MEDIUM 42

The WPtouch WordPress plugin before 4.3.45 unserialises the content of an imported settings file, which could lead to PHP object injections issues when an user import (intentionally or not) a malicious settings file and…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00931 Published 2023-01-09 Fixed in 4.3.45
Open these records in search →