Read the docs

webfactory

Records46All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

webfactory records in CISA KEV

No webfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Minimal Coming Soon & Maintenance Mode 5 records MEDIUM Wp Database Reset 3 records MEDIUM Wp Reset 3 records LOW 301 Redirects 2 records MEDIUM External Links In New Window / New Tab 2 records LOW Under Construction 2 records LOW Wp Login Lockdown 2 records LOW Wp Reset Pro 2 records MEDIUM

Records

2 records in 301 Redirects · all components

TI-2019-14361 CVE-2019-19915 · GHSA-r8f7-ff3w-94hq

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users…

Priority MEDIUM 40

The "301 Redirects - Easy Redirect Manager" plugin before 2.45 for WordPress allows users (with subscriber or greater access) to modify, delete, or inject redirect rules, and exploit XSS, with the /admin-ajax.php?action=…

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00859 Published 2019-12-19 No fix listed CWE-352
TI-2021-06434 CVE-2021-24142 · GHSA-8w3p-34v2-ghhr

301 Redirects - Easy Redirect Manager < 2.51 - Authenticated SQL Injection

Priority LOW 34

Unvaludated input in the 301 Redirects - Easy Redirect Manager WordPress plugin, versions before 2.51, did not sanitise its "Redirect From" column when importing a CSV file, allowing high privilege users to perform SQL i…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01238 Published 2021-03-18 Fixed in 2.51 CWE-89
Open these records in search →