omnipressteam

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

omnipressteam records in CISA KEV

No omnipressteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Omnipress 1 record LOW

Records

1 record in Omnipress · all components

TI-2024-12449 CVE-2024-13407 · GHSA-wh4v-h3gp-f38v

Omnipress <= 1.5.4 - Authenticated (Contributor+) Post Disclosure

LOW 29

The Omnipress plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.5.4 via the megamenu block due to insufficient restrictions on which posts can be included.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00276 Published 2025-03-14 No fix listed CWE-639

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0