Read the docs

Made with Fuel

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Made with Fuel records in CISA KEV

No Made with Fuel vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Better Notifications For Wp 1 record LOW Customize Wordpress Emails And Alerts 1 record LOW

Records

1 record in Customize Wordpress Emails And Alerts · all components

TI-2022-00271 CVE-2022-0345 · GHSA-9jh8-cc8h-44v2

Better Notifications for WP < 1.8.7 - Email Address Disclosure

Priority LOW 20

The Customize WordPress Emails and Alerts WordPress plugin before 1.8.7 does not have authorisation and CSRF check in its bnfw_search_users AJAX action, allowing any authenticated users to call it and query for user e-ma…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00429 Published 2022-02-28 Fixed in 1.8.7 CWE-352
Open these records in search →