James Ward

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

James Ward records in CISA KEV

No James Ward vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Mail Catcher 2 records LOW

Records

3 records

TI-2023-27749 CVE-2023-50844 · GHSA-jj5v-fhp7-pww8

WordPress WP Mail Catcher Plugin <= 2.1.3 is vulnerable to SQL Injection

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in James Ward Mail logging – WP Mail Catcher.This issue affects Mail logging – WP Mail Catcher: from n/a through 2.1.3.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00529 Published 2023-12-28 No fix listed CWE-89

TI-2023-02886 CVE-2023-3080 · GHSA-fpmh-3mrp-3732

WP Mail Catcher <= 2.1.2 - Unauthenticated Stored Cross-Site Scripting via Email Subject

LOW 32

The WP Mail Catcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting via an email subject in versions up to, and including, 2.1.2 due to insufficient input sanitization and output escaping.

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00462 Published 2023-07-12 No fix listed CWE-79

TI-2024-21176 CVE-2024-32099 · GHSA-xf3f-gwvp-r5m8

WordPress WP Mail Catcher plugin <= 2.1.6 - Cross Site Request Forgery vulnerability

LOW 19

Cross-Site Request Forgery (CSRF) vulnerability in James Ward WP Mail Catcher.This issue affects WP Mail Catcher: from n/a through 2.1.6.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00212 Published 2024-04-15 No fix listed CWE-352

Open these records in search →

Critical	0
High	2
Medium	1
Low	0
No CVSS	0