WP Event Manager

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

WP Event Manager records in CISA KEV

No WP Event Manager vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Event Manager 10 records LOW Event Banner 1 record LOW User Profile Avatar 1 record MEDIUM

Records

1 record in User Profile Avatar · all components

TI-2023-05860 CVE-2023-6384 · GHSA-9j2m-4pqq-wmh6

WP User Profile Avatar < 1.0.1 - Author+ Avatar Deletion/Update via IDOR

MEDIUM 53

The WP User Profile Avatar WordPress plugin before 1.0.1 does not properly check for authorisation, allowing authors to delete and update arbitrary avatar

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2024-01-22 Fixed in 1.0.1 CWE-639

Open these records in search →

Critical	0
High	4
Medium	12
Low	0
No CVSS	0