Read the docs

Wp-master

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Wp-master records in CISA KEV

No Wp-master vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Logo Manager For Enamad 2 records HIGH Pardakht-delkhah 2 records MEDIUM Azan 1 record MEDIUM Feed Changer & Remover 1 record LOW

Records

2 records in Logo Manager For Enamad · all components

TI-2024-04430 CVE-2024-4757 · GHSA-252v-9w3r-w4vm

Logo Manager For Enamad <= 0.7.0 - Stored XSS via CSRF

Priority HIGH 70

The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payl…

CVSS 3.1HIGH 8.1 Network No auth User interaction EPSS 0.00521 Published 2024-06-25 No fix listed CWE-352
TI-2024-04800 CVE-2024-5170 · GHSA-f3pj-vwf5-5vr3

Logo Manager For Enamad <= 0.7.1 - Admin+ Stored XSS via Widget

Priority MEDIUM 59

The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even wh…

CVSS 3.1MEDIUM 5.7 Network High privileges User interaction EPSS 0.00334 Published 2024-09-17 No fix listed CWE-79
Open these records in search →