i-plug inc.

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

i-plug inc. records in CISA KEV

No i-plug inc. vulnerabilities are listed in CISA KEV.

1 record

TI-2024-21854 CVE-2024-32988 · GHSA-4fpw-6gvj-w9xf

LOW 39

'OfferBox' App for Android versions 2.0.0 to 2.3.17 and 'OfferBox' App for iOS versions 2.1.7 to 2.6.14 use a hard-coded secret key for JWT.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00365 Published 2024-05-22 No fix listed CWE-798