Code Supply Co.

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Code Supply Co. records in CISA KEV

No Code Supply Co. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Absolute Reviews 2 records LOW Sight 1 record LOW Squaretype 1 record LOW

Records

1 record in Squaretype · all components

TI-2021-07122 CVE-2021-24840 · GHSA-25vj-qm23-fx63

Squaretype Modern Blog < 3.0.4 - Unauthenticated Private/Schedule Posts Disclosure

LOW 26

The Squaretype WordPress theme before 3.0.4 allows unauthenticated users to manipulate the query_vars used to retrieve the posts to display in one of its REST endpoint, without any validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01168 Published 2021-11-08 Fixed in 3.0.4 CWE-639

Open these records in search →

Critical	0
High	1
Medium	4
Low	0
No CVSS	0