Read the docs

phoeniixx

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

phoeniixx records in CISA KEV

No phoeniixx vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Custom My Account For Woocommerce 1 record LOW Filter Portfolio Gallery 1 record LOW

Records

1 record in Filter Portfolio Gallery · all components

TI-2021-07077 CVE-2021-24795 · GHSA-7ww6-pfhx-xq3v

Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF

Priority LOW 30

The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00549 Published 2021-12-13 No fix listed CWE-352
Open these records in search →