Read the docs

xunhuweb

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

xunhuweb records in CISA KEV

No xunhuweb vulnerabilities are listed in CISA KEV.

Records

2 records

TI-2024-08456 CVE-2024-9106 · GHSA-25p4-xq52-q9pw

Wechat Social login <= 1.3.0 - Authentication Bypass

Priority MEDIUM 52

The Wechat Social login plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0171 Published 2024-10-01 No fix listed CWE-288
TI-2024-08458 CVE-2024-9108 · GHSA-3xpv-gvv8-7m5h

Wechat Social login <= 1.3.0 - Unauthenticated Arbitrary File Upload

Priority MEDIUM 50

The Wechat Social login plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in the 'convert_remoteimage_to_local' function in versions up to, and including, 1.3.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00853 Published 2024-10-01 No fix listed CWE-434
Open these records in search →