Flothemes

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Flothemes records in CISA KEV

No Flothemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Flo Forms 2 records LOW Flo-launch 1 record MEDIUM

Records

1 record in Flo-launch · all components

TI-2022-00461 CVE-2022-0541 · GHSA-r8qw-7677-x9rf

Flo Launch < 2.4.1 - Missing Authentication Allow Full Site Takeover

MEDIUM 45

The flo-launch WordPress plugin before 2.4.1 injects code into wp-config.php when creating a cloned site, allowing any attacker to initiate a new site install by setting the flo_custom_table_prefix cookie to an arbitrary…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01703 Published 2022-04-25 Fixed in 2.4.1 CWE-284

Open these records in search →

Critical	1
High	0
Medium	3
Low	0
No CVSS	0