TI-2024-02698 CVE-2024-2890 · GHSA-ch4r-pfrr-4fj5
WordPress Tumult Hype Animations plugin <= 1.9.12 - Arbitrary File Upload vulnerability
Priority HIGH 74
Unrestricted Upload of File with Dangerous Type vulnerability in Tumult Inc.
Tumult Inc
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Tumult Inc records in CISA KEVNo Tumult Inc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2024-20187 CVE-2024-30461 · GHSA-pg27-v4gw-7cjc
WordPress Tumult Hype Animations plugin <= 1.9.11 - CSRF to XSS vulnerability
Priority LOW 30
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Tumult Inc Tumult Hype Animations allows DOM-Based XSS.This issue affects Tumult Hype Animations: from n/a thro…
TI-2024-09766 CVE-2024-10543 · GHSA-mgch-hpmx-xmxm
Tumult Hype Animations <= 1.9.14 - Missing Authorization
Priority LOW 20
The Tumult Hype Animations plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the hypeanimations_getcontent function in all versions up to, and including, 1.9.14.
TI-2024-20186 CVE-2024-30460 · GHSA-wc86-g5f7-g83x
WordPress Tumult Hype Animations plugin <= 1.9.11 - Cross Site Request Forgery (CSRF) vulnerability
Priority LOW 19
Cross-Site Request Forgery (CSRF) vulnerability in Tumult Inc Tumult Hype Animations.This issue affects Tumult Hype Animations: from n/a through 1.9.11.