Read the docs

ghera74

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

ghera74 records in CISA KEV

No ghera74 vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2025-12823 CVE-2025-14033 · GHSA-2pg2-2j8p-rhqw

Authorization bypass in ghera74 ilGhera Support System for WooCommerce

Priority LOW 30

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'get_ticket_content_callback' function in all versions up to, and incl…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00256 Published 2026-05-13 No fix listed CWE-639
TI-2026-02054 CVE-2026-2421 · GHSA-m7m5-f625-9j3w

Path traversal in ghera74 ilGhera Carta Docente for WooCommerce

Priority LOW 29

The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of the 'wccd-delete-certificate' AJAX action.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00516 Published 2026-03-20 No fix listed CWE-22
TI-2025-12824 CVE-2025-14034 · GHSA-9677-rfqw-p4m4

Missing authorization in ghera74 ilGhera Support System for WooCommerce

Priority LOW 24

The ilGhera Support System for WooCommerce plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on the 'delete_single_ticket_callback' and 'change_ticket_stat…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0028 Published 2026-01-06 No fix listed CWE-862
TI-2026-07571 CVE-2026-8615 · GHSA-8699-m8pv-8mxw

Missing authorization in ghera74 ilGhera Reviso Exporter for WooCommerce

Priority LOW 20

The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check and missing nonce verification on the disconnect_callback() function in versio…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2026-09-09 No fix listed CWE-862
Open these records in search →