Read the docs

Mat Bao Corp

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Mat Bao Corp records in CISA KEV

No Mat Bao Corp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Helper Premium 3 records MEDIUM

Records

5 records

TI-2023-00424 CVE-2023-0448 · GHSA-33wx-8m27-jwj5

Cross-site scripting in WP Helper Lite Wordpress Plugin

Priority MEDIUM 60

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.42928 Published 2023-01-24 No fix listed CWE-79
TI-2025-18454 CVE-2025-24737 · GHSA-jxpg-7f4x-g2fh

WordPress WP Helper Premium plugin <= 4.6.1 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Helper Premium: from n/a through <= 4.6.1.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00307 Published 2025-04-17 No fix listed CWE-862
TI-2024-08415 CVE-2024-9065 · GHSA-46x3-967f-mwfv

WP Helper Premium <= 4.6.1 - Missing Authorization in whp_smtp_send_mail_test

Priority LOW 24

The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and including, 4.6.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00389 Published 2024-10-10 No fix listed CWE-862
Open these records in search →