Vulnerabilities

TI-2024-09272 CVE-2024-9989 · GHSA-hmfh-w3mx-w6j4

Crypto <= 2.18 - Authentication Bypass via log_in

MEDIUM 59

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.18.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07112 Published 2024-10-29 No fix listed CWE-288

TI-2024-09273 CVE-2024-9990 · GHSA-mvwj-4mhx-2qqv

MEDIUM 40

The Crypto plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.15.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00291 Published 2024-10-29 No fix listed CWE-352

TI-2024-09271 CVE-2024-9988 · GHSA-3xw3-m65r-4f37

MEDIUM 51

The Crypto plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.19.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01102 Published 2024-10-29 No fix listed CWE-288