Read the docs

zanematthew

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

zanematthew records in CISA KEV

No zanematthew vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records

Priority MEDIUM 51

The ZM Ajax Login & Register plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0098 Published 2023-04-15 No fix listed CWE-288
Priority LOW 38

Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a lo…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.13313 Published 2015-06-10 No fix listed CWE-22
Open these records in search →