Read the docs

Moove Agency

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Moove Agency records in CISA KEV

No Moove Agency vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gdpr Cookie Compliance 9 records MEDIUM Import Xml And Rss Feeds 3 records HIGH User Activity Tracking And Log 2 records MEDIUM Contact Form Check Tester 1 record LOW Redirect 404 To Parent 1 record MEDIUM Select All Categories And Taxonomies, Change Checkbox To Radio Buttons 1 record MEDIUM

Records

3 records in Import Xml And Rss Feeds · all components

TI-2023-04172 CVE-2023-4521 · GHSA-2j3g-p2x2-c94q

Import XML and RSS Feeds < 2.1.5 - Unauthenticated RCE

Priority HIGH 82

The Import XML and RSS Feeds WordPress plugin before 2.1.5 contains a web shell, allowing unauthenticated attackers to perform RCE.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.40828 Published 2023-09-25 Fixed in 2.1.5
TI-2023-03976 CVE-2023-4300 · GHSA-5qfc-w62v-vw7j

Import XML and RSS Feeds < 2.1.4 - Admin+ Arbitrary File Upload

Priority HIGH 67

The Import XML and RSS Feeds WordPress plugin before 2.1.4 does not filter file extensions for uploaded files, allowing an attacker to upload a malicious PHP file, leading to Remote Code Execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.02042 Published 2023-09-25 Fixed in 2.1.4
Open these records in search →