Read the docs

Moove Agency

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Moove Agency records in CISA KEV

No Moove Agency vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Gdpr Cookie Compliance 9 records MEDIUM Import Xml And Rss Feeds 3 records HIGH User Activity Tracking And Log 2 records MEDIUM Contact Form Check Tester 1 record LOW Redirect 404 To Parent 1 record MEDIUM Select All Categories And Taxonomies, Change Checkbox To Radio Buttons 1 record MEDIUM

Records

2 records in User Activity Tracking And Log · all components

TI-2024-00894 CVE-2024-0970 · GHSA-v8j5-hjg7-w5w5

User Activity Tracking and Log < 4.1.4 - IP Spoofing

Priority MEDIUM 63

This User Activity Tracking and Log WordPress plugin before 4.1.4 retrieves client IP addresses from potentially untrusted headers, allowing an attacker to manipulate its value.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00376 Published 2025-05-15 Fixed in 4.1.4
TI-2023-03839 CVE-2023-4150 · GHSA-4f42-3j25-qr4f

User Activity Tracking and Log < 4.0.9 - License Update/Deactivation via CSRF

Priority MEDIUM 53

The User Activity Tracking and Log WordPress plugin before 4.0.9 does not have proper CSRF checks when managing its license, which could allow attackers to make logged in admins update and deactivate the plugin's license…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00252 Published 2023-08-30 Fixed in 4.0.9
Open these records in search →