Read the docs

Wpruby

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Wpruby records in CISA KEV

No Wpruby vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Controlled Admin Access 2 records MEDIUM Ruby Help Desk 1 record MEDIUM

Records

3 records

TI-2023-01064 CVE-2023-1125 · GHSA-m535-fq8f-38fp

Ruby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR

Priority MEDIUM 62

The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than the…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00559 Published 2023-05-02 Fixed in 1.3.4 CWE-639
TI-2021-03217 CVE-2021-4360 · GHSA-6p6c-8qqm-q7cx

Controlled Admin Access < 1.5.6 - Privilege Escalation

Priority MEDIUM 45

The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.5 by not properly restricting access to the configuration page.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01153 Published 2023-06-07 Fixed in 1.5.6 CWE-284
Open these records in search →