Gmace Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Gmace Project records in CISA KEV

No Gmace Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Gmace · all components

TI-2023-01428 CVE-2023-1509 · GHSA-4v79-g36g-gxp6

MEDIUM 41

The GMAce plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.5.2.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00594 Published 2023-03-29 No fix listed CWE-352

TI-2023-09660 CVE-2023-23861 · GHSA-j9vg-wh3v-f932

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in German Mesky GMAce plugin <= 1.5.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00248 Published 2023-03-29 No fix listed CWE-352