royalnavneet

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

royalnavneet records in CISA KEV

No royalnavneet vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2026-04925 CVE-2026-5617 · GHSA-679q-mrgx-wpvr

Login as User <= 1.0.3 - Authenticated (Subscriber+) Privilege Escalation via 'oclaup_original_admin' Cookie

MEDIUM 40

The Login as User plugin for WordPress is vulnerable to Privilege Escalation in all versions up to, and including, 1.0.3.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00399 Published 2026-04-15 No fix listed CWE-639

TI-2026-68302 CVE-2026-105059 · GHSA-rghv-qgm9-69c2

Missing authorization in WordPress Delete All Comments plugin

LOW 29

Missing Authorization vulnerability in royalnavneet Delete All Comments of wordpress delete-all-comments-of-website allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Delete All Co…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00383 Published 2026-10-06 No fix listed CWE-862

TI-2022-04562 CVE-2022-4974 · GHSA-p5fp-r7v7-h5q7

Freemius SDK <= 2.4.2 - Missing Authorization Checks

LOW 28

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_de…

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00442 Published 2024-10-16 Fixed in 2.0.2, 1.9.8 +273 CWE-862

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0