wpopal

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

wpopal records in CISA KEV

No wpopal vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records in Opal Estate · all components

TI-2021-03244 CVE-2021-4387 · GHSA-x597-6f24-323f

LOW 39

The Opal Estate plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.11.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00579 Published 2023-07-01 No fix listed CWE-352

TI-2021-03245 CVE-2021-4388 · GHSA-fc4w-56x3-9r3r

LOW 25

The Opal Estate plugin for WordPress is vulnerable to featured property modifications in versions up to, and including, 1.6.11.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0073 Published 2023-07-01 No fix listed CWE-862