Read the docs

wordapp

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

wordapp records in CISA KEV

No wordapp vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wordapp 1 record MEDIUM

Records

1 record

TI-2023-02799 CVE-2023-2987 · GHSA-v5h4-982g-572v

Wordapp <= 1.6.0 - Authorization Bypass through Use of Insufficiently Unique Cryptographic Signature

Priority MEDIUM 49

The Wordapp plugin for WordPress is vulnerable to authorization bypass due to an use of insufficiently unique cryptographic signature on the 'wa_pdx_op_config_set' function in versions up to, and including, 1.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00526 Published 2023-05-31 No fix listed CWE-345
Open these records in search →