FULL.

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

FULL. records in CISA KEV

No FULL. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Full - Customer 2 records MEDIUM

Records

2 records in Full - Customer · all components

TI-2023-03929 CVE-2023-4243 · GHSA-f723-pfg4-v3p5

FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation

MEDIUM 42

The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.009 Published 2023-08-09 No fix listed CWE-285

TI-2023-03928 CVE-2023-4242 · GHSA-7rj5-723h-386q

FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check

LOW 21

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00539 Published 2023-08-09 No fix listed CWE-287

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0