dunhakdis

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

dunhakdis records in CISA KEV

No dunhakdis vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2024-01559 CVE-2024-1678 · GHSA-h54c-hv83-8w9f

Subway – Private Site Option <= 2.1.4 - Improper Access Control to Sensitive Information Exposure via REST API

LOW 30

The Subway – Private Site Option plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 2.1.4 via the REST API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00448 Published 2024-05-02 No fix listed CWE-284

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0