Read the docs

vanquish

Records30All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high17CVSS 7.0–8.9

Exploited now

vanquish records in CISA KEV

No vanquish vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Woocommerce Customers Manager 7 records HIGH Woocommerce Support Ticket System 4 records MEDIUM User Extra Fields 2 records MEDIUM Woocommerce Upload Files 2 records MEDIUM

Records

2 records in User Extra Fields · all components

TI-2024-10334 CVE-2024-11150 · GHSA-pwxh-q8rp-9v3p

WordPress User Extra Fields <= 16.6 - Unauthenticated Arbitrary File Deletion

Priority MEDIUM 52

The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the delete_tmp_uploaded_file() function in all versions up to, and including, 16.6…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01389 Published 2024-11-13 No fix listed CWE-22
TI-2024-10012 CVE-2024-10800 · GHSA-7mqq-22j6-frjr

WordPress User Extra Fields <= 16.6 - Missing Authorization to Authenticated (Subscriber+) Privilege Escalation

Priority MEDIUM 42

The WordPress User Extra Fields plugin for WordPress is vulnerable to privilege escalation due to a missing capability check on the ajax_save_fields() function in all versions up to, and including, 16.6.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00818 Published 2024-11-13 No fix listed CWE-862
Open these records in search →