Read the docs

Simple Bitcoin Faucets Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Simple Bitcoin Faucets Project records in CISA KEV

No Simple Bitcoin Faucets Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Simple Bitcoin Faucets 1 record MEDIUM

Records

1 record in Simple Bitcoin Faucets · all components

TI-2022-02787 CVE-2022-3024 · GHSA-m8wj-gc9v-2c82

Simple Bitcoin Faucets <= 1.7.0 - Unauthorised AJAX Call to Stored XSS

Priority MEDIUM 58

The Simple Bitcoin Faucets WordPress plugin through 1.7.0 does not have any authorisation and CSRF in an AJAX action, allowing any authenticated users, such as subscribers to call it and add/delete/edit Bonds.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00289 Published 2022-09-26 No fix listed CWE-352
Open these records in search →