Read the docs

kraftplugins

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

kraftplugins records in CISA KEV

No kraftplugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Mega Elements 4 records LOW Wheel Of Life 2 records MEDIUM Demo Importer Plus 1 record LOW

Records

2 records in Wheel Of Life · all components

TI-2024-31629 CVE-2024-47311 · GHSA-455r-x3fg-cvp2

WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.1.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862
TI-2024-03382 CVE-2024-3627 · GHSA-prph-5cfv-59c9

Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints

Priority LOW 25

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00388 Published 2024-06-20 No fix listed CWE-862
Open these records in search →