Read the docs

WPExperts

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

WPExperts records in CISA KEV

No WPExperts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Smtp 19 records CRITICAL Mycred 7 records MEDIUM Wp Multi Store Locator 3 records MEDIUM All In One Login 2 records HIGH License Manager For Woocommerce 2 records LOW New User Approve 2 records LOW Password Protected 2 records LOW Wholesale For Woocommerce 2 records LOW

Records

2 records in All In One Login · all components

TI-2023-03363 CVE-2023-3604 · GHSA-cppp-j42j-cvvh

Change WP Admin < 1.1.4 - Secret Login Page Disclosure

Priority HIGH 74

The Change WP Admin Login WordPress plugin before 1.1.4 discloses the URL of the hidden login page when accessing a crafted URL, bypassing the protection offered.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00836 Published 2023-08-21 Fixed in 1.1.4
TI-2022-01459 CVE-2022-1589 · GHSA-v43h-w929-q37g

Change wp-admin Login < 1.1.0 - Unauthenticated Arbitrary Settings Update

Priority LOW 34

The Change wp-admin login WordPress plugin before 1.1.0 does not properly check for authorisation and is also missing CSRF check when updating its settings, which could allow unauthenticated users to change the settings.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00611 Published 2022-05-30 Fixed in 1.1.0 CWE-352
Open these records in search →