Vendors / jurredeklijn Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now jurredeklijn records in CISA KEV No jurredeklijn vulnerabilities are listed in CISA KEV.
Priority HIGH 76
The Wux Blog Editor plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'wuxbt_insertImageNew' function in versions up to, and including, 3.0.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.38412 · Published 2024-10-26 · No fix listed CWE-434
Priority MEDIUM 50
The Wux Blog Editor plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 3.0.0.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00559 · Published 2024-10-26 · No fix listed CWE-288
Open these records in search → All records by CVSS severity
Critical2 High0 Medium0 Low0 No CVSS0