Read the docs

StoreApps

Records14All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

StoreApps records in CISA KEV

No StoreApps vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Affiliate For Woocommerce 2 records MEDIUM News Announcement Scroll 2 records MEDIUM Stock Manager For Woocommerce 2 records LOW Smart Manager 1 record HIGH Temporary Login Without Password 1 record LOW

Records

1 record in Temporary Login Without Password · all components

TI-2021-07118 CVE-2021-24836 · GHSA-x8f8-g3c4-95m3

Temporary Login Without Password < 1.7.1 - Subscriber+ Plugin's Settings Update

Priority LOW 20

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00358 Published 2021-12-13 Fixed in 1.7.1 CWE-352
Open these records in search →