Wpruby

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Wpruby records in CISA KEV

No Wpruby vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Controlled Admin Access 2 records MEDIUM Ruby Help Desk 1 record MEDIUM

Records

2 records in Controlled Admin Access · all components

TI-2021-06507 CVE-2021-24215 · GHSA-5wrq-c7c8-h4hx

Controlled Admin Access < 1.5.2 - Improper Access Control & Privilege Escalation

MEDIUM 53

An Improper Access Control vulnerability was discovered in the Controlled Admin Access WordPress plugin before 1.5.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.08471 Published 2021-04-12 Fixed in 1.5.2 CWE-284

TI-2021-03217 CVE-2021-4360 · GHSA-6p6c-8qqm-q7cx

Controlled Admin Access < 1.5.6 - Privilege Escalation

MEDIUM 45

The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.5 by not properly restricting access to the configuration page.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01153 Published 2023-06-07 Fixed in 1.5.6 CWE-284

Open these records in search →

Critical	2
High	0
Medium	1
Low	0
No CVSS	0