nouthemes

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

nouthemes records in CISA KEV

No nouthemes vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Leopard 1 record LOW

Records

3 records

TI-2024-09811 CVE-2024-10589 · GHSA-6j6p-pvv3-rrg5

Leopard <= 3.1.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Options Update

MEDIUM 49

The Leopard - WordPress Offload Media plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the import_settings() function in a…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00487 Published 2024-11-09 No fix listed CWE-862

TI-2024-28909 CVE-2024-43256 · GHSA-x9qv-64rq-2vc3

WordPress Leopard plugin <= 2.0.36 - Subscriber+ Plugin Settings Change vulnerability

LOW 31

Missing Authorization vulnerability in nouthemes Leopard - WordPress offload media allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Leopard - WordPress offload media: from n/a through 2.…

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00358 Published 2024-08-19 No fix listed CWE-862

TI-2024-28910 CVE-2024-43257 · GHSA-qffh-9pr5-jcqg

WordPress Leopard plugin <= 2.0.36 - Subscriber+ Sensitive Data Exposure vulnerability

LOW 29

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Nouthemes Leopard - WordPress offload media.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00418 Published 2024-08-26 No fix listed CWE-200

Open these records in search →

Critical	1
High	1
Medium	1
Low	0
No CVSS	0