Read the docs

WPExperts

Records61All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high25CVSS 7.0–8.9

Exploited now

WPExperts records in CISA KEV

No WPExperts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Post Smtp 19 records CRITICAL Mycred 7 records MEDIUM Wp Multi Store Locator 3 records MEDIUM All In One Login 2 records HIGH License Manager For Woocommerce 2 records LOW New User Approve 2 records LOW Password Protected 2 records LOW Wholesale For Woocommerce 2 records LOW

Records

2 records in New User Approve · all components

TI-2022-01495 CVE-2022-1625 · GHSA-573v-fpj9-9qh6

New User Approve < 2.4 - Arbitrary Settings Update & Invitation Code Creation via CSRF

Priority LOW 20

The New User Approve WordPress plugin before 2.4 does not have CSRF check in place when updating its settings and adding invitation codes, which could allow attackers to add invitation codes (for bypassing the provided r…

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00382 Published 2022-06-27 Fixed in 2.4 CWE-352
Open these records in search →