Read the docs

webfactory

Records46All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

webfactory records in CISA KEV

No webfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Minimal Coming Soon & Maintenance Mode 5 records MEDIUM Wp Database Reset 3 records MEDIUM Wp Reset 3 records LOW 301 Redirects 2 records MEDIUM External Links In New Window / New Tab 2 records LOW Under Construction 2 records LOW Wp Login Lockdown 2 records LOW Wp Reset Pro 2 records MEDIUM

Records

2 records in Wp Login Lockdown · all components

TI-2023-27742 CVE-2023-50837 · GHSA-wf3c-fh77-x5hq

WordPress Login Lockdown Plugin <= 2.06 is vulnerable to SQL Injection

Priority LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WebFactory Ltd Login Lockdown – Protect Login Form.This issue affects Login Lockdown – Protect Login Form: from n/a th…

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00579 Published 2023-12-29 No fix listed CWE-89
TI-2024-01249 CVE-2024-1340 · GHSA-wf3p-q3f6-j3g8

Login Lockdown – Protect Login Form <= 2.08 - Missing Authorization

Priority LOW 25

The Login Lockdown – Protect Login Form plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the generate_export_file function in all versions up to, and including, 2.08.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0039 Published 2024-02-20 No fix listed CWE-862
Open these records in search →