Vendors / usability_dynamics Records 9 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0
CVSS high 2
Exploited now usability_dynamics records in CISA KEV No usability_dynamics vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 60
The WP-Invoice WordPress plugin through 4.3.1 does not have CSRF check in place when updating its settings, and is lacking sanitisation as well as escaping in some of them, allowing attacker to make a logged in admin cha…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00266 · Published 2024-01-16 · No fix listed CWE-352
Priority LOW 36
The WP-CRM WordPress plugin through 1.2.1 does not validate and sanitise fields when exporting people to a CSV file, leading to a CSV injection vulnerability.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.01012 · Published 2022-06-13 · No fix listed CWE-1236
Priority LOW 32
The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
CVSS 3.1 MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.01374 · Published 2019-09-20 · No fix listed CWE-269
Priority LOW 31
The WP-Stateless – Google Cloud Storage plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on the dismiss_notices() function in all versions up to, and including, 3.4.0.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.00406 · Published 2024-04-06 · No fix listed CWE-862
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01972 · Published 2019-09-20 · No fix listed CWE-668
Priority LOW 28
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
CVSS 3.1 MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.01766 · Published 2019-09-20 · No fix listed CWE-668
Open these records in search → All records by CVSS severity
0 2 7 0 0
THREATIST.IORead the docs