Vendors / dd32 Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now dd32 records in CISA KEV No dd32 vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 53
The Core Control WordPress plugin through 1.2.1 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack
CVSS 3.1 MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00285 · Published 2024-01-16 · No fix listed CWE-352
Priority LOW 28
A vulnerability was found in dd32 Debug Bar Plugin up to 0.8 on WordPress.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00559 · Published 2023-03-11 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0