Zao

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zao records in CISA KEV

No Zao vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wp Ecommerce 1 record LOW

Records

1 record

TI-2024-01415 CVE-2024-1516 · GHSA-wwm6-cf6h-7h22

WP eCommerce <= 3.15.1 - Missing Authorization to Unauthenticated Arbitrary Post Creation

LOW 30

The WP eCommerce plugin for WordPress is vulnerable to unauthorized arbitrary post creation due to a missing capability check on the check_for_saas_push() function in all versions up to, and including, 3.15.1.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00422 Published 2024-02-28 No fix listed CWE-862

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0