Wpcerber

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wpcerber records in CISA KEV

No Wpcerber vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Wp Cerber · all components

TI-2021-15479 CVE-2021-37597 · GHSA-hwhr-mg66-h8cp

MEDIUM 46

WP Cerber before 8.9.3 allows MFA bypass via wordpress_logged_in_[hash] manipulation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02124 Published 2021-08-19 No fix listed CWE-287

TI-2021-15480 CVE-2021-37598 · GHSA-7fw3-2wmp-j43f

LOW 29

WP Cerber before 8.9.3 allows bypass of /wp-json access control via a trailing ? character.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0235 Published 2021-08-19 No fix listed CWE-863