Read the docs

Wow-estore

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9

Exploited now

Wow-estore records in CISA KEV

No Wow-estore vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Side Menu 3 records MEDIUM Button Generator - Easily Button Builder 1 record LOW Float Menu 1 record LOW Herd Effects 1 record LOW Popup Box 1 record LOW

Records

1 record in Float Menu · all components

TI-2022-00242 CVE-2022-0313 · GHSA-rp6m-v76g-9wr4

Float Menu < 4.3.1 - Arbitrary Menu Deletion via CSRF

Priority LOW 20

The Float menu WordPress plugin before 4.3.1 does not have CSRF check in place when deleting menu, which could allow attackers to make a logged in admin delete them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00471 Published 2022-02-21 Fixed in 4.3.1 CWE-352
Open these records in search →