Read the docs

WPoperation

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

WPoperation records in CISA KEV

No WPoperation vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Salert - Fake Sales Notification Woocommerce 1 record LOW Ultra Companion 1 record LOW

Records

3 records

TI-2024-16320 CVE-2024-24803 · GHSA-c8wh-grp4-2gjm

WordPress Ultra Companion Plugin <= 1.1.9 is vulnerable to Cross Site Scripting (XSS)

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in WPoperation Ultra Companion – Companion plugin for WPoperation Themes allows Stored XSS.This issue affects Ultra Compa…

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0031 Published 2024-02-10 No fix listed CWE-79
TI-2023-15429 CVE-2023-32126 · GHSA-cgwx-876g-49h6

WordPress SALERT plugin <= 1.2.1 - Broken Access Control vulnerability

Priority LOW 20

Missing Authorization vulnerability in WPoperation SALERT allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALERT: from n/a through 1.2.1.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00405 Published 2024-12-09 No fix listed CWE-862
Open these records in search →