ajay

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

ajay records in CISA KEV

No ajay vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Better Search 3 records MEDIUM Top 10 3 records MEDIUM Contextual Related Posts 1 record MEDIUM Knowledge Base 1 record LOW

Records

3 records in Top 10 · all components

TI-2023-25556 CVE-2023-47238 · GHSA-rf5h-5hgc-wfg9

WordPress Top 10 Plugin <= 3.3.2 is vulnerable to Cross Site Request Forgery (CSRF)

MEDIUM 40

Cross-Site Request Forgery (CSRF) vulnerability in WebberZone Top 10 – WordPress Popular posts by WebberZone plugin <= 3.3.2 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00277 Published 2023-11-09 No fix listed CWE-352

TI-2020-18930 CVE-2020-36761 · GHSA-2xcx-834w-fp84

Top 10 <= 2.9.4 - Cross-Site Request Forgery Bypass

LOW 21

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00563 Published 2023-07-12 Fixed in 2.9.5 CWE-352

TI-2023-11238 CVE-2023-25993 · GHSA-vwwm-hx4x-6w7w

WordPress Top 10 – Popular posts plugin for WordPress plugin <= 3.2.3 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in WebberZone Top 10 allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Top 10: from n/a through 3.2.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0043 Published 2024-12-09 No fix listed CWE-862

Open these records in search →

Critical	0
High	3
Medium	20
Low	0
No CVSS	0