Read the docs

Feataholic

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Feataholic records in CISA KEV

No Feataholic vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Maz Loader 2 records MEDIUM

Records

2 records

TI-2021-06951 CVE-2021-24669 · GHSA-xv52-8ff7-g4jf

MAZ Loader < 1.3.3 - Contributor+ SQL Injection

Priority MEDIUM 41

The MAZ Loader – Preloader Builder for WordPress plugin before 1.3.3 does not validate or escape the loader_id parameter of the mzldr shortcode, which allows users with a role as low as Contributor to perform SQL injecti…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01334 Published 2021-11-08 Fixed in 1.3.3 CWE-89
TI-2021-06950 CVE-2021-24668 · GHSA-8crm-4582-5p48

MAZ Loader < 1.4.1 - Arbitrary Loader Deletion via CSRF

Priority LOW 20

The MAZ Loader WordPress plugin before 1.4.1 does not enforce nonce checks, which allows attackers to make administrators delete arbitrary loaders via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0045 Published 2021-11-23 Fixed in 1.4.1 CWE-352
Open these records in search →