mndpsingh287

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

mndpsingh287 records in CISA KEV

No mndpsingh287 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Newsletter Popup 4 records HIGH Advanced Search 1 record LOW File Manager 1 record MEDIUM

Records

1 record in Advanced Search · all components

TI-2024-02551 CVE-2024-2739 · GHSA-3gx6-pfq2-pf53

Advance Search <= 1.1.6 - Shortcode Deletion via CSRF

LOW 38

The Advanced Search WordPress plugin through 1.1.6 does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00335 Published 2024-04-15 No fix listed CWE-352

Open these records in search →

Critical	3
High	9
Medium	7
Low	0
No CVSS	0