Read the docs

ce21com

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

ce21com records in CISA KEV

No ce21com vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records

TI-2024-09530 CVE-2024-10285 · GHSA-c545-ccpc-555g

CE21 Suite <= 2.2.0 - JWT Token Disclosure

Priority MEDIUM 50

The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00617 Published 2024-11-09 No fix listed CWE-200
Priority MEDIUM 49

The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the wp_ajax_nopriv_ce21_single_sign_on_save_api_settings AJAX action in versions 2.2.1 to 2.3.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0046 Published 2025-11-04 No fix listed CWE-306
TI-2024-09529 CVE-2024-10284 · GHSA-wvhj-3792-hf6c

CE21 Suite <= 2.2.0 - Authentication Bypass

Priority MEDIUM 49

The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00411 Published 2024-11-09 No fix listed CWE-288
Open these records in search →