wp-buy

Records36All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high23CVSS 7.0–8.9

Exploited now

wp-buy records in CISA KEV

No wp-buy vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Content Copy Protection & No Right Click 6 records MEDIUM Visitor Traffic Real Time Statistics 4 records MEDIUM Login As User Or Customer (user Switching) 3 records HIGH Captchinoo 1 record MEDIUM Conditional Marketing Mailer 1 record MEDIUM Login Protection - Limit Failed Login Attempts 1 record MEDIUM Owl Carousel Slider 1 record LOW Seo Redirection-301 Redirect Manager 1 record MEDIUM

Records

3 records in Login As User Or Customer (user Switching) · all components

TI-2022-03943 CVE-2022-4305 · GHSA-22mr-8pm7-gm4c

Login as User or Customer < 3.3 - Unauthenticated Privilege Escalation to Admin

HIGH 75

The Login as User or Customer WordPress plugin before 3.3 lacks authorization checks to ensure that users are allowed to log in as another one, which could allow unauthenticated attackers to obtain a valid admin session.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.38625 Published 2023-01-23 Fixed in 3.3

TI-2023-06631 CVE-2023-7247 · GHSA-grpx-32wr-q4c4

Login as User or Customer <= 3.8 - Admin Account Takeover

MEDIUM 58

The Login as User or Customer WordPress plugin through 3.8 does not prevent users to log in as any other user on the site.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00636 Published 2024-03-11 No fix listed

TI-2021-06487 CVE-2021-24195 · GHSA-xx6m-fqm7-6ghv

Login as User or Customer (User Switching) < 1.9 - Arbitrary Plugin Installation/Activation via Low Privilege User

MEDIUM 41

Low privileged users can use the AJAX action 'cp_plugins_do_button_job_later_callback' in the Login as User or Customer (User Switching) WordPress plugin before 1.8, to install any plugin (including a specific version) f…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01325 Published 2021-05-14 Fixed in 1.8 CWE-285

Open these records in search →