Dinesh Karki

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Dinesh Karki records in CISA KEV

No Dinesh Karki vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Use Any Font 3 records LOW Wp Armour 2 records MEDIUM Block Plugin Update 1 record LOW

Records

6 records

TI-2024-29537 CVE-2024-43948 · GHSA-3pcg-3m3w-7636

WordPress WP Armour Extended plugin <= 1.26 - Reflected Cross Site Scripting (XSS) vulnerability

MEDIUM 64

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00307 Published 2024-08-29 No fix listed CWE-79

TI-2023-23787 CVE-2023-44261 · GHSA-6f7r-w4mx-q89p

WordPress Block Plugin Update Plugin <= 3.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki Block Plugin Update plugin <= 3.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00275 Published 2023-10-10 No fix listed CWE-352

TI-2024-31623 CVE-2024-47305 · GHSA-hqfh-qjr5-xcfm

WordPress Use Any Font plugin <= 6.3.08 - Cross Site Request Forgery (CSRF) vulnerability

LOW 37

Cross-Site Request Forgery (CSRF) vulnerability in Dnesscarkey Use Any Font use-any-font allows Cross Site Request Forgery.This issue affects Use Any Font: from n/a through <= 6.3.08.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00208 Published 2024-09-25 No fix listed CWE-352

TI-2021-07256 CVE-2021-24977 · GHSA-vj7q-773h-8qqf

Use Any Font < 6.2.1 - Unauthenticated Arbitrary CSS Appending

LOW 30

The Use Any Font | Custom Font Uploader WordPress plugin before 6.2.1 does not have any authorisation checks when assigning a font, allowing unauthenticated users to sent arbitrary CSS which will then be processed by the…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01492 Published 2022-02-28 Fixed in 6.2.1 CWE-862

TI-2022-10734 CVE-2022-27851 · GHSA-9425-89m4-hr22

WordPress Use Any Font plugin <= 6.1.7 - Cross-Site Request Forgery (CSRF) vulnerability

LOW 25

Cross-Site Request Forgery (CSRF) in Use Any Font (WordPress plugin) <= 6.1.7 allows an attacker to deactivate the API key.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00397 Published 2022-04-15 No fix listed CWE-352

TI-2024-29536 CVE-2024-43947 · GHSA-298q-cxp8-5c9m

WordPress WP Armour Extended plugin <= 1.26 - Cross Site Request Forgery (CSRF) vulnerability

LOW 24

Cross-Site Request Forgery (CSRF) vulnerability in Dinesh Karki WP Armour Extended.This issue affects WP Armour Extended: from n/a through 1.26.

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.00183 Published 2024-08-29 No fix listed CWE-352

Open these records in search →

Critical	0
High	3
Medium	3
Low	0
No CVSS	0