odude

Records9All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

odude records in CISA KEV

No odude vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Crypto Tool · all components

TI-2024-09272 CVE-2024-9989 · GHSA-hmfh-w3mx-w6j4

MEDIUM 59

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07112 Published 2024-10-29 No fix listed CWE-288

TI-2024-09271 CVE-2024-9988 · GHSA-3xw3-m65r-4f37

MEDIUM 51

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01102 Published 2024-10-29 No fix listed CWE-288

TI-2024-09273 CVE-2024-9990 · GHSA-mvwj-4mhx-2qqv

MEDIUM 40

The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00291 Published 2024-10-29 No fix listed CWE-352