Invite Anyone Project

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Invite Anyone Project records in CISA KEV

No Invite Anyone Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2017-13716 CVE-2017-18543 · GHSA-c997-chgq-qrrw

MEDIUM 46

The invite-anyone plugin before 1.3.16 for WordPress has incorrect access control for email-based invitations.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01825 Published 2019-08-16 No fix listed CWE-284

TI-2017-13717 CVE-2017-18544 · GHSA-9h4w-qvw3-x7mw

LOW 39

The invite-anyone plugin before 1.3.16 for WordPress has admin-panel CSRF.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00649 Published 2019-08-16 No fix listed CWE-352

TI-2017-13718 CVE-2017-18545 · GHSA-jmx4-q2wx-5gqj

LOW 36

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01326 Published 2019-08-16 No fix listed CWE-20