wpdevteam

Records210All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical13CVSS 9.0–10.0

CVSS high44CVSS 7.0–8.9

Exploited now

wpdevteam records in CISA KEV

No wpdevteam vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Essential Addons For Elementor 55 records CRITICAL Embedpress 26 records MEDIUM Essential Blocks 25 records HIGH Reviewx 8 records HIGH Simple 301 Redirects 5 records MEDIUM Betterdocs 4 records MEDIUM Notificationx 4 records CRITICAL Betterlinks 3 records MEDIUM

Records

3 records in Betterlinks · all components

TI-2023-24134 CVE-2023-45104 · GHSA-3px9-vgqj-48v9

WordPress BetterLinks plugin <= 1.6.0 - Broken Access Control vulnerability

MEDIUM 44

Missing Authorization vulnerability in WPDeveloper BetterLinks betterlinks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BetterLinks: from n/a through <= 1.6.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00457 Published 2025-01-02 No fix listed CWE-862

TI-2024-34586 CVE-2024-51672 · GHSA-2r6v-v2j7-w3xh

WordPress BetterLinks plugin <= 2.1.7 - SQL Injection vulnerability

LOW 34

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPDeveloper BetterLinks betterlinks allows SQL Injection.This issue affects BetterLinks: from n/a through <= 2.1.7.

CVSS 3.1HIGH 7.6 Network High privileges No interaction EPSS 0.00465 Published 2024-11-04 No fix listed CWE-89

TI-2021-07094 CVE-2021-24812 · GHSA-4w3h-ggjg-2hvj

BetterLinks < 1.2.6 - Admin+ Stored Cross-Site Scripting

LOW 25

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00624 Published 2021-11-23 Fixed in 1.2.6 CWE-79

Open these records in search →