roxnor

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

roxnor records in CISA KEV

No roxnor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Metform Elementor Contact Form Builder 23 records HIGH Elements Kit Elementor Addons 14 records MEDIUM Elementskit 9 records MEDIUM Elementskit Elementor Addons 7 records LOW Wp Ultimate Review 7 records LOW Wp Social Login And Register Social Counter 3 records LOW Fundengine 2 records MEDIUM Gutenkit 1 record LOW

Records

2 records in Fundengine · all components

TI-2022-00697 CVE-2022-0788 · GHSA-xgvg-f3q7-ww4w

WP Fundraising Donation and Crowdfunding Platform < 1.5.0 - Unauthenticated SQLi

MEDIUM 53

The WP Fundraising Donation and Crowdfunding Platform WordPress plugin before 1.5.0 does not sanitise and escape a parameter before using it in a SQL statement via one of it's REST route, leading to an SQL injection expl…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0775 Published 2022-06-06 Fixed in 1.5.0 CWE-89

TI-2024-06207 CVE-2024-6698 · GHSA-7f4q-mxmp-vrc9

FundEngine – Donation and Crowdfunding Platform <= 1.7.0 - Authenticated (Subscriber+) Privilege Escalation

MEDIUM 40

The FundEngine plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.7.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00431 Published 2024-08-01 No fix listed CWE-862

Open these records in search →

Critical	9
High	26
Medium	93
Low	3
No CVSS	0