Zatzlabs

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Zatzlabs records in CISA KEV

No Zatzlabs vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

My Private Site 2 records LOW

Records

2 records

TI-2024-00902 CVE-2024-0978 · GHSA-26pv-rxjj-m2pw

My Private Site <= 3.0.14 - Improper Access Control to Sensitive Information Exposure via REST API

LOW 30

The My Private Site plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.0.14 via the REST API.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00461 Published 2024-02-20 No fix listed CWE-284

TI-2022-01497 CVE-2022-1627 · GHSA-gpv9-46c5-35gc

My Private Site < 3.0.8 - Arbitrary Settings Update via CSRF

LOW 20

The My Private Site WordPress plugin before 3.0.8 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00429 Published 2022-06-27 Fixed in 3.0.8 CWE-352

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0