Read the docs

india-web-developer

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

india-web-developer records in CISA KEV

No india-web-developer vulnerabilities are listed in CISA KEV.

Records

4 records

TI-2024-10353 CVE-2024-11178 · GHSA-86hc-w3w8-r2v5

Login With OTP <= 1.4.2 - Authentication Bypass via Weak OTP

Priority LOW 38

The Login With OTP plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.4.2.

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00647 Published 2024-12-06 No fix listed CWE-288
TI-2024-11682 CVE-2024-12590 · GHSA-qr56-97jh-6556

WP Youtube Gallery <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via id Parameter

Priority LOW 28

The WP Youtube Gallery plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'id' parameter in all versions up to, and including, 1.9 due to insufficient input sanitization and output escaping.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00283 Published 2025-01-07 No fix listed CWE-79
TI-2024-08834 CVE-2024-9521 · GHSA-fr85-7j9q-8cxc

SEO Manager <= 1.9 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

Priority LOW 28

The SEO Manager plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.9 due to insufficient input sanitization and output escaping on user supplied attributes…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00283 Published 2024-10-16 No fix listed CWE-79
Open these records in search →