Kaswara Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Kaswara Project records in CISA KEV

No Kaswara Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Kaswara 2 records HIGH

Records

2 records

TI-2021-06576 CVE-2021-24284 · GHSA-wqvg-8q49-hjc7

Kaswara Modern VC Addons <= 3.0.1 - Unauthenticated Arbitrary File Upload

HIGH 70

The Kaswara Modern VC Addons WordPress plugin through 3.0.1 allows unauthenticated arbitrary file upload via the 'uploadFontIcon' AJAX action.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.4214 Published 2021-05-14 No fix listed CWE-434

TI-2021-03304 CVE-2021-4448 · GHSA-69cq-9pp2-wmg3

Kaswara Modern VC Addons <= 3.0.1 - Missing Authorization

MEDIUM 51

The Kaswara Modern VC Addons plugin for WordPress is vulnerable to authorization bypass in versions up to, and including, 3.0.1 due to insufficient capability checking on various AJAX actions.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01381 Published 2024-10-16 No fix listed CWE-862

Open these records in search →

Critical	2
High	0
Medium	0
Low	0
No CVSS	0