creativeon

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

creativeon records in CISA KEV

No creativeon vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-28900 CVE-2024-43247 · GHSA-qj78-v57f-v8c2

WordPress WHMpress plugin <= 6.2-revision-5 - Subscriber+ Arbitrary Settings Change vulnerability

MEDIUM 40

Missing Authorization vulnerability in creativeon WHMpress allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WHMpress: from n/a through 6.2-revision-5.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00444 Published 2024-08-19 No fix listed CWE-862

TI-2024-28899 CVE-2024-43246 · GHSA-3m59-fh79-m7m6

WordPress WHMpress plugin <= 6.2-revision-5 - Reflected Cross Site Scripting (XSS) vulnerability

LOW 31

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in creativeon WHMpress allows Reflected XSS.This issue affects WHMpress: from n/a through 6.2-revision-5.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00271 Published 2024-08-18 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	0
Low	0
No CVSS	0