Read the docs

Brutebank

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Brutebank records in CISA KEV

No Brutebank vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Brutebank 1 record MEDIUM

Records

1 record

TI-2022-04060 CVE-2022-4443 · GHSA-hgrr-97rg-c34m

BruteBank - WP Security & Firewall < 1.9 - Settings Update via CSRF

Priority MEDIUM 62

The BruteBank WordPress plugin before 1.9 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged-in admin change them via a CSRF attack.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00335 Published 2023-01-23 Fixed in 1.9
Open these records in search →