Deryck

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Deryck records in CISA KEV

No Deryck vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-33933 CVE-2024-50503 · GHSA-74qh-mqmg-cvxj

WordPress User Toolkit plugin <= 1.2.3 - Account Takeover vulnerability

MEDIUM 49

Authentication Bypass Using an Alternate Path or Channel vulnerability in Deryck User Toolkit user-toolkit allows Authentication Bypass.This issue affects User Toolkit: from n/a through <= 1.2.3.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0051 Published 2024-10-30 No fix listed CWE-288

TI-2024-09176 CVE-2024-9890 · GHSA-wvxc-2969-v7x4

User Toolkit <= 1.2.3 - Authenticated (Subscriber+) Authentication Bypass

MEDIUM 42

The User Toolkit plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.2.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01054 Published 2024-10-26 No fix listed CWE-288

Open these records in search →

Critical	1
High	1
Medium	0
Low	0
No CVSS	0