Read the docs

chertz

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

chertz records in CISA KEV

No chertz vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Easy Post Types 3 records MEDIUM Addressfield Tokens 1 record LOW

Records

4 records

TI-2024-09342 CVE-2024-10079 · GHSA-28g6-x68x-c4p9

WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) PHP Object Injection

Priority MEDIUM 42

The WP Easy Post Types plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 1.4.4 via deserialization of untrusted input from the 'text' parameter in the 'ajax_import_content' func…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00809 Published 2024-10-18 No fix listed CWE-502
TI-2024-09341 CVE-2024-10078 · GHSA-cgj8-gpqh-35qr

WP Easy Post Types <= 1.4.4 - Authenticated (Subscriber+) Missing Authorization via Multiple Functions

Priority LOW 34

The WP Easy Post Types plugin for WordPress is vulnerable to unauthorized access, modification, and loss of data due to a missing capability check on multiple functions in all versions up to, and including, 1.4.4.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00411 Published 2024-10-18 No fix listed CWE-862
TI-2024-09343 CVE-2024-10080 · GHSA-38wc-25cg-5x9w

WP Easy Post Types <= 1.4.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via Post Meta

Priority LOW 28

The WP Easy Post Types plugin for WordPress is vulnerable to Stored Cross-Site Scripting via post meta in versions up to, and including, 1.4.4 due to insufficient input sanitization and output escaping on user supplied a…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00343 Published 2024-10-18 No fix listed CWE-79
TI-2014-03205 CVE-2014-3933 · GHSA-7f4j-xr2p-4j8q

Cross-site scripting (XSS) vulnerability in the address components field formatter in the…

Priority LOW 19

Cross-site scripting (XSS) vulnerability in the address components field formatter in the AddressField Tokens module 7.x-1.x before 7.x-1.4 for Drupal allows remote authenticated users to inject arbitrary web script or H…

CVSS 2.0LOW 3.5 Network Low privileges Interaction — EPSS 0.00946 Published 2014-06-02 No fix listed CWE-79
Open these records in search →