TI-2024-20268 CVE-2024-30544 · GHSA-jjpc-9gcp-fgx5
WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability
Priority MEDIUM 48
Missing Authorization vulnerability in UPQODE Whizzy.This issue affects Whizzy: from n/a through 1.1.18.
UPQODE
Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
UPQODE records in CISA KEVNo UPQODE vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records
TI-2024-25978 CVE-2024-38744 · GHSA-jf3q-9x2q-r3hj
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability
Priority MEDIUM 42
Missing Authorization vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows Accessing Functionality Not Properly Constrained by ACLs, Stored XSS.This issue affects Plum: Spin Wheel & Email Pop-up: from n/a throu…
TI-2024-20267 CVE-2024-30543 · GHSA-x8p6-mr22-v5c9
WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability
Priority LOW 35
Authorization Bypass Through User-Controlled Key vulnerability in UPQODE Whizz.This issue affects Whizzy: from n/a through 1.1.18.
TI-2024-25977 CVE-2024-38743 · GHSA-fv65-j2g7-x89x
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability
Priority LOW 30
Access Control vulnerability in Upqode Plum: Spin Wheel & Email Pop-up allows .