ultrapressorg

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ultrapressorg records in CISA KEV

No ultrapressorg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Empowerment 1 record MEDIUM Ultrapress 1 record MEDIUM Unseen Blog 1 record MEDIUM

Records

1 record in Ultrapress · all components

TI-2024-06888 CVE-2024-7434 · GHSA-88rw-gmxx-j2pc

UltraPress <= 1.2.2 - Authenticated (Contributor+) PHP Object Injection

MEDIUM 41

The UltraPress theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.2.2 via deserialization of untrusted input.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00624 Published 2024-10-01 No fix listed CWE-502

Open these records in search →

Critical	0
High	3
Medium	4
Low	0
No CVSS	0