Read the docs

brijeshk89

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

brijeshk89 records in CISA KEV

No brijeshk89 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

2 records in Ip Based Login · all components

TI-2024-11862 CVE-2024-12800 · GHSA-x5f2-w3c3-pvvg

IP Based Login < 2.4.1 - Admin+ Stored XSS

Priority MEDIUM 55

The IP Based Login WordPress plugin before 2.4.1 does not sanitise values when importing, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00326 Published 2025-05-15 Fixed in 2.4.1 CWE-79
Priority MEDIUM 53

The IP Based Login WordPress plugin before 2.4.1 does not have CSRF checks in some places, which could allow attackers to make logged in users delete all logs via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00193 Published 2025-03-25 Fixed in 2.4.1 CWE-352
Open these records in search →