Read the docs

themetechmount

Records18All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

themetechmount records in CISA KEV

No themetechmount vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Truebooker 3 records HIGH

Records

3 records in Truebooker · all components

TI-2024-06423 CVE-2024-6924 · GHSA-xwhw-83c9-38cf

TrueBooker < 1.0.3 - Multiple Unauthenticated SQLi

Priority HIGH 82

The TrueBooker WordPress plugin before 1.0.3 does not properly sanitise and escape a parameter before using it in a SQL statement via an AJAX action available to unauthenticated users, leading to a SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03292 Published 2024-09-08 Fixed in 1.0.3 CWE-89
TI-2024-06424 CVE-2024-6925 · GHSA-rf9h-8cx8-5xww

TrueBooker < 1.0.3 - Settings Update via CSRF

Priority MEDIUM 53

The TrueBooker WordPress plugin before 1.0.3 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00226 Published 2024-09-08 Fixed in 1.0.3 CWE-352
Open these records in search →