Read the docs

Gtbabel

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Gtbabel records in CISA KEV

No Gtbabel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gtbabel 1 record HIGH

Records

1 record in Gtbabel · all components

TI-2024-10784 CVE-2024-11638 · GHSA-wrxx-v2cm-rh9h

Gtbabel < 6.6.9 - Unauthenticated Admin Account Takeover

Priority HIGH 73

The Gtbabel WordPress plugin before 6.6.9 does not ensure that the URL to perform code analysis upon belongs to the blog which could allow unauthenticated attackers to retrieve a logged in user (such as admin) cookies by…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00555 Published 2025-03-10 Fixed in 6.6.9
Open these records in search →