wpmoose

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

wpmoose records in CISA KEV

No wpmoose vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Yuki 2 records LOW Kenta Blocks 1 record LOW

Records

2 records in Yuki · all components

TI-2024-01295 CVE-2024-1388 · GHSA-pf5w-4v9j-2h6f

Yuki <= 1.3.13 - Missing Authorization to Authenticated (Subscriber+) Theme Setting Reset

LOW 20

The Yuki theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the reset_customizer_options() function in all versions up to, and including, 1.3.13.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0034 Published 2024-02-28 No fix listed CWE-862

TI-2024-01810 CVE-2024-1943 · GHSA-j5gc-9h38-mfq7

Yuki <= 1.3.14 - Cross-Site Request Forgery to Theme Setting Reset

LOW 19

The Yuki theme for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including 1.3.14.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.0021 Published 2024-02-28 No fix listed CWE-352

Open these records in search →

Critical	0
High	0
Medium	5
Low	0
No CVSS	0