Read the docs

TienCOP

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9

Exploited now

TienCOP records in CISA KEV

No TienCOP vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Wp Extra 5 records MEDIUM

Records

5 records

TI-2023-04885 CVE-2023-5311 · GHSA-p3gw-wp5c-9ccx

WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification

Priority MEDIUM 44

The WP EXtra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the register() function in versions up to, and including, 6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01851 Published 2023-10-25 No fix listed CWE-862
TI-2023-24839 CVE-2023-46212 · GHSA-mcch-629j-3qrw

WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control

Priority LOW 38

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00254 Published 2023-12-18 No fix listed CWE-352
TI-2023-04887 CVE-2023-5314 · GHSA-h572-9c8v-9vqh

WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending

Priority LOW 20

The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capability check on the 'test-email' section of the register() function in versions up to, and including…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2023-11-22 No fix listed CWE-862
Open these records in search →