Read the docs

Metagauss

Records164All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high71CVSS 7.0–8.9

Exploited now

Metagauss records in CISA KEV

No Metagauss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Profilegrid 35 records HIGH Registrationmagic 34 records HIGH Eventprime 27 records MEDIUM Download Plugin 5 records HIGH Download Theme 1 record LOW Leadmagic 1 record LOW Themeflection Numbers 1 record MEDIUM

Records

1 record in Themeflection Numbers · all components

TI-2023-00841 CVE-2023-0889 · GHSA-vh2f-q9g6-wv38

TF Random Numbers < 2.0.1 - Subscriber+ Arbitrary Option Update

Priority MEDIUM 62

Themeflection Numbers WordPress plugin before 2.0.1 does not have authorisation and CSRF check in an AJAX action, and does not ensure that the options to be updated belong to the plugin.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00301 Published 2023-04-17 Fixed in 2.0.1
Open these records in search →