Koalaapps

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Koalaapps records in CISA KEV

No Koalaapps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Account Page Editor 1 record HIGH

Records

1 record

TI-2023-04182 CVE-2023-4536 · GHSA-5qx2-wfg4-53mm

My Account Page Editor < 1.3.2 - Subscriber+ Arbitrary File Upload

HIGH 73

The My Account Page Editor WordPress plugin before 1.3.2 does not validate the profile picture to be uploaded, allowing any authenticated users, such as subscriber to upload arbitrary files to the server, leading to RCE

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01026 Published 2024-01-16 Fixed in 1.3.2 CWE-434

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0