Read the docs

Web-X

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Web-X records in CISA KEV

No Web-X vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Be-popia-compliant 1 record MEDIUM Be Popia Compliant 1 record LOW

Records

2 records

TI-2022-23522 CVE-2022-47445 · GHSA-rq59-f2vw-wx6p

WordPress Be POPIA Compliant Plugin <= 1.2.0 is vulnerable to SQL Injection

Priority MEDIUM 50

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Web-X Be POPIA Compliant be-popia-compliant allows SQL Injection.This issue affects Be POPIA Compliant: from n/a throu…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00639 Published 2023-11-03 No fix listed CWE-89
TI-2022-01075 CVE-2022-1186 · GHSA-9fwm-2jcf-cq55

Be POPIA Compliant <= 1.1.5 - Sensitive Information Exposure

Priority LOW 32

The WordPress plugin Be POPIA Compliant exposed sensitive information to unauthenticated users consisting of site visitors emails and usernames via an API route, in versions up to an including 1.1.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0117 Published 2022-04-19 No fix listed CWE-200
Open these records in search →