paulepro2019

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

paulepro2019 records in CISA KEV

No paulepro2019 vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2026-52009 CVE-2026-74019 · GHSA-jfmx-9426-2537

WordPress EPROLO Dropshipping plugin <= 2.4.2 - Broken Access Control vulnerability

LOW 31

Unauthenticated Broken Access Control in EPROLO Dropshipping <= 2.4.2 versions.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.0029 Published 2026-08-20 No fix listed CWE-862

TI-2025-11127 CVE-2025-12133 · GHSA-5mcc-4r6r-qx96

EPROLO Dropshipping <= 2.3.1 - Missing Authorization to Authenticated (Subscriber+) Tracking Data Modification

LOW 20

The EPROLO Dropshipping plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the wp_ajax_eprolo_delete_tracking and wp_ajax_eprolo_save_tracking_data AJAX endpoints…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00241 Published 2025-12-05 No fix listed CWE-862

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0