Read the docs

phoeniixx

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

phoeniixx records in CISA KEV

No phoeniixx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom My Account For Woocommerce 1 record LOW Filter Portfolio Gallery 1 record LOW

Records

4 records

TI-2024-04238 CVE-2024-4552 · GHSA-4xfp-fcw8-3q4p

Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass

Priority MEDIUM 50

The Social Login Lite For WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-06-04 No fix listed CWE-288
TI-2021-07077 CVE-2021-24795 · GHSA-7ww6-pfhx-xq3v

Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF

Priority LOW 30

The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00549 Published 2021-12-13 No fix listed CWE-352
Open these records in search →