Vendors / Convertplug Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now Convertplug records in CISA KEV No Convertplug vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 36
The ConvertPlus plugin for WordPress is vulnerable to unauthorized modification of data that can lead to a denial of service due to a missing capability check on the 'cp_dismiss_notice' AJAX endpoint in all versions up t…
CVSS 3.1 HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.00474 · Published 2025-02-12 · No fix listed CWE-862
Priority LOW 36
The ConvertPlus plugin before 3.4.5 for WordPress has an unintended account creation (with the none role) via a request for variants.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.0162 · Published 2019-09-03 · No fix listed
Open these records in search → All records by CVSS severity
0 2 0 0 0
