Yoohoo Plugins

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Yoohoo Plugins records in CISA KEV

No Yoohoo Plugins vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sitewide Notice 1 record LOW When Last Login 1 record LOW

Records

2 records

TI-2023-12193 CVE-2023-27461 · GHSA-ph3m-f8gv-chg7

WordPress When Last Login Plugin <= 1.2.1 is vulnerable to Cross Site Request Forgery (CSRF)

LOW 38

Cross-Site Request Forgery (CSRF) vulnerability in Yoohoo Plugins When Last Login plugin <= 1.2.1 versions.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00306 Published 2023-11-22 No fix listed CWE-352

TI-2021-06875 CVE-2021-24592 · GHSA-w8mm-7prp-fr25

Sitewide Notice WP < 2.3 - Authenticated Stored XSS

LOW 23

The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfi…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-08-30 Fixed in 2.3 CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0