Posti

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Posti records in CISA KEV

No Posti vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-37041 CVE-2024-56005 · GHSA-4fg5-v4j6-7jhj

WordPress Posti Shipping Plugin <= 3.10.3 - CSRF to Settings Change vulnerability

LOW 34

Cross-Site Request Forgery (CSRF) vulnerability in Posti Posti Shipping posti-shipping allows Cross Site Request Forgery.This issue affects Posti Shipping: from n/a through <= 3.10.3.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0026 Published 2024-12-16 No fix listed CWE-352

TI-2024-33941 CVE-2024-50512 · GHSA-j64j-2vj4-m2m8

WordPress Posti Shipping plugin <= 3.10.2 - Full Path Disclosure (FPD) vulnerability

LOW 30

Generation of Error Message Containing Sensitive Information vulnerability in Posti Posti Shipping posti-shipping allows Retrieve Embedded Sensitive Data.This issue affects Posti Shipping: from n/a through <= 3.10.2.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00343 Published 2024-10-30 No fix listed CWE-209

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0