Read the docs

Helpful Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Helpful Project records in CISA KEV

No Helpful Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Helpful 2 records MEDIUM

Records

2 records in Helpful · all components

TI-2022-02628 CVE-2022-2834 · GHSA-6j5r-8vhm-p3x4

Helpful < 4.5.26 - Information Disclosure

Priority MEDIUM 57

The Helpful WordPress plugin before 4.5.26 puts the exported logs and feedbacks in a publicly accessible location and guessable names, which could allow attackers to download them and retrieve sensitive information such…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00978 Published 2022-10-17 Fixed in 4.5.26 CWE-552
TI-2021-07123 CVE-2021-24841 · GHSA-w23j-r8pr-6978

Helpful < 4.4.59 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Helpful WordPress plugin before 4.4.59 does not sanitise and escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is dis…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00757 Published 2021-11-17 Fixed in 4.4.59 CWE-79
Open these records in search →