webfactory

Records46All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

webfactory records in CISA KEV

No webfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Minimal Coming Soon & Maintenance Mode 5 records MEDIUM Wp Database Reset 3 records MEDIUM Wp Reset 3 records LOW 301 Redirects 2 records MEDIUM External Links In New Window / New Tab 2 records LOW Under Construction 2 records LOW Wp Login Lockdown 2 records LOW Wp Reset Pro 2 records MEDIUM

Records

2 records in Wp Reset Pro · all components

TI-2021-14990 CVE-2021-36909 · GHSA-xjf9-fcqr-8q9x

WordPress WP Reset PRO Premium plugin <= 5.98 - Authenticated Database Reset vulnerability

MEDIUM 44

Authenticated Database Reset vulnerability in WordPress WP Reset PRO Premium plugin (versions <= 5.98) allows any authenticated user to wipe the entire database regardless of their authorization.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01887 Published 2021-11-18 No fix listed CWE-284

TI-2021-14989 CVE-2021-36908 · GHSA-h25v-fr72-m765

WordPress WP Reset PRO Premium Plugin <= 5.98 - Cross-Site Request Forgery (CSRF) vulnerability

MEDIUM 41

Cross-Site Request Forgery (CSRF) vulnerability in WebFactory Ltd.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00707 Published 2021-11-18 No fix listed CWE-352

Open these records in search →

Critical	3
High	12
Medium	31
Low	0
No CVSS	0