Vendors / ce21com Records 6 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 5
CVSS high 1
Exploited now ce21com records in CISA KEV No ce21com vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 50
The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00617 · Published 2024-11-09 · No fix listed CWE-200
Priority MEDIUM 49
The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00411 · Published 2024-11-09 · No fix listed CWE-288
Priority LOW 39
The CE21 Suite plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'ce21_single_sign_on_save_api_settings' function in versions up to, and including, 2.2.0.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00283 · Published 2024-11-09 · No fix listed CWE-862
Open these records in search → All records by CVSS severity
5 1 0 0 0
THREATIST.IORead the docs