Read the docs

Tipsacarrier Project

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tipsacarrier Project records in CISA KEV

No Tipsacarrier Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Tipsacarrier 1 record LOW

Records

1 record in Tipsacarrier · all components

TI-2021-07280 CVE-2021-25002 · GHSA-697f-3w53-jxc5

Tipsacarrier < 1.5.0.5 - Unauthenticated Orders Disclosure

Priority LOW 36

The Tipsacarrier WordPress plugin before 1.5.0.5 does not have any authorisation check in place some functions, which could allow unauthenticated users to access Orders data which could be used to retrieve the client ful…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01521 Published 2022-05-02 Fixed in 1.5.0.5 CWE-862
Open these records in search →