themekraft

Records26All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high9CVSS 7.0–8.9

Exploited now

themekraft records in CISA KEV

No themekraft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Buddyforms 11 records HIGH Buddypress Woocommerce My Account Integration 3 records MEDIUM Post Form 3 records MEDIUM Buddypress Woocommerce My Account Integration. Create Woocommerce Member Pages 1 record LOW Post Form Registration Form Profile Form For User Profiles And Content Forms 1 record LOW Tk Google Fonts Gdpr Compliant 1 record MEDIUM

Records

1 record in Buddypress Woocommerce My Account Integration. Create Woocommerce Member Pages · all components

TI-2024-23595 CVE-2024-35726 · GHSA-74f6-jvr9-qch3

WordPress WooBuddy plugin <= 3.4.19 - Broken Access Control vulnerability

LOW 38

Missing Authorization vulnerability in ThemeKraft WooBuddy.This issue affects WooBuddy: from n/a through 3.4.19.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00356 Published 2024-06-10 No fix listed CWE-862

Open these records in search →