Read the docs

Rich-web

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Rich-web records in CISA KEV

No Rich-web vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Coming Soon 1 record LOW Event Timeline 1 record LOW Image Gallery 1 record LOW Tab 1 record LOW

Records

1 record in Tab · all components

TI-2021-07113 CVE-2021-24831 · GHSA-fh28-f6m7-2h5v

Tab - Accordion, FAQ < 1.3.2 - Unauthenticated AJAX Calls

Priority LOW 35

All AJAX actions of the Tab WordPress plugin before 1.3.2 are available to both unauthenticated and authenticated users, allowing unauthenticated attackers to modify various data in the plugin, such as add/edit/delete ar…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01235 Published 2022-01-03 Fixed in 1.3.2 CWE-862
Open these records in search →