roxnor

Records131All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high26CVSS 7.0–8.9

Exploited now

roxnor records in CISA KEV

No roxnor vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Metform Elementor Contact Form Builder 23 records HIGH Elements Kit Elementor Addons 14 records MEDIUM Elementskit 9 records MEDIUM Elementskit Elementor Addons 7 records LOW Wp Ultimate Review 7 records LOW Wp Social Login And Register Social Counter 3 records LOW Fundengine 2 records MEDIUM Gutenkit 1 record LOW

Records

7 records in Wp Ultimate Review · all components

TI-2024-21564 CVE-2024-32684 · GHSA-5hfx-4fjq-cv5j

WordPress WP Ultimate Review plugin <= 2.2.5 - Broken Access Control on Review vulnerability

LOW 39

Missing Authorization vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00385 Published 2024-04-22 No fix listed CWE-862

TI-2024-21563 CVE-2024-32683 · GHSA-mhc2-rv3c-8qpj

WordPress WP Ultimate Review plugin <= 2.2.5 - Insecure Direct Object References (IDOR) vulnerability

LOW 39

Authorization Bypass Through User-Controlled Key vulnerability in Wpmet Wp Ultimate Review.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00464 Published 2024-04-19 No fix listed CWE-639

TI-2024-14432 CVE-2024-21746 · GHSA-55ff-crw4-233h

WordPress Wp Ultimate Review plugin <= 2.3.6 - IP limit Bypass vulnerability

LOW 39

Authentication Bypass by Spoofing vulnerability in Roxnor Wp Ultimate Review wp-ultimate-review allows Identity Spoofing.This issue affects Wp Ultimate Review: from n/a through <= 2.3.6.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0048 Published 2024-05-17 No fix listed CWE-290

TI-2023-24738 CVE-2023-46085 · GHSA-3vj4-3g37-rf7w

WordPress Wp Ultimate Review Plugin <= 2.2.4 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.2.4 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00256 Published 2023-10-22 No fix listed CWE-352

TI-2023-13449 CVE-2023-28987 · GHSA-4g2c-9347-58ff

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00309 Published 2023-11-12 No fix listed CWE-352

TI-2024-21565 CVE-2024-32685 · GHSA-2p92-vrh7-9m5h

WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability

LOW 32

Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00388 Published 2024-05-17 No fix listed CWE-602

TI-2023-13263 CVE-2023-28751 · GHSA-2j32-c79r-58r7

WordPress Wp Ultimate Review Plugin <= 2.0.3 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Wpmet Wp Ultimate Review plugin <= 2.0.3 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00369 Published 2023-06-23 No fix listed CWE-79

Open these records in search →

Critical	9
High	26
Medium	93
Low	3
No CVSS	0