Read the docs

Seur Oficial Project

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Seur Oficial Project records in CISA KEV

No Seur Oficial Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Seur Oficial 2 records LOW

Records

2 records

TI-2021-07282 CVE-2021-25004 · GHSA-jrh7-fghq-g8xm

SEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download

Priority LOW 25

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction aft…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01156 Published 2022-02-07 Fixed in 1.7.2 CWE-552
TI-2021-07283 CVE-2021-25005 · GHSA-2hcp-6839-gvwf

SEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowe…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00605 Published 2022-01-17 Fixed in 1.7.0 CWE-79
Open these records in search →