Palmspark

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Palmspark records in CISA KEV

No Palmspark vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Wp User Control · all components

TI-2023-04526 CVE-2023-4915 · GHSA-xh2m-qfw7-qgvg

LOW 30

The WP User Control plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 1.5.3.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00455 Published 2023-09-13 No fix listed CWE-620