Read the docs

coder426

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

coder426 records in CISA KEV

No coder426 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Passwords Manager 3 records LOW

Records

3 records

TI-2024-11705 CVE-2024-12614 · GHSA-7434-8vjp-8fj4

Passwords Manager <= 1.4.8 - Missing Authorization to Authenticated (Subscriber+) Add Password + Update Encryption Key

Priority LOW 39

The Passwords Manager plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'pms_save_setting' and 'post_new_pass' AJAX actions in all versions up to, and includ…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00395 Published 2025-01-16 No fix listed CWE-89
TI-2024-11704 CVE-2024-12613 · GHSA-rr3p-4f3w-5ghr

Passwords Manager <= 1.4.8 - Unauthenticated SQL Injection

Priority LOW 39

The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX fuctions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00515 Published 2025-01-16 No fix listed CWE-89
TI-2024-11706 CVE-2024-12615 · GHSA-9gqj-gcg6-fqjj

Passwords Manager <= 1.4.8 - Authenticated (Subscriber+) SQL Injection

Priority LOW 29

The Passwords Manager plugin for WordPress is vulnerable to SQL Injection via the $wpdb->prefix value in several AJAX actions in all versions up to, and including, 1.4.8 due to insufficient escaping on the user supplied…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00497 Published 2025-01-16 No fix listed CWE-89
Open these records in search →