Read the docs

WP Experts

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

WP Experts records in CISA KEV

No WP Experts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Protect Wp Admin 2 records MEDIUM Custom Share Buttons With Floating Sidebar 1 record LOW Wp-categories-widget 1 record LOW Wp Social Buttons 1 record LOW

Records

2 records in Protect Wp Admin · all components

TI-2023-02941 CVE-2023-3139 · GHSA-xr6q-qcgj-7prg

Protect WP Admin < 4.0 - Unauthenticated Protection Bypass

Priority MEDIUM 60

The Protect WP Admin WordPress plugin before 4.0 discloses the URL of the admin panel via a redirection of a crafted URL, bypassing the protection offered.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00734 Published 2023-07-04 Fixed in 4.0 CWE-601
TI-2021-07186 CVE-2021-24906 · GHSA-vfmc-6gqf-r52m

Protect WP Admin < 3.6.2 - Unauthenticated Plugin Deactivation

Priority LOW 36

The Protect WP Admin WordPress plugin before 3.6.2 does not check for authorisation in the lib/pwa-deactivate.php file, which could allow unauthenticated users to disable the plugin (and therefore the protection offered)…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01489 Published 2022-01-24 Fixed in 3.6.2 CWE-862
Open these records in search →