Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: themekraft Component: Post Form Clear all filters
TI-2024-01084 CVE-2024-1169 · GHSA-r22q-78j6-33wj

Missing authorization in themekraft Post Form – Registration Form – Profile Form for User…

Priority MEDIUM 40

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media upload due to a missing capability check on…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0058 Published 2024-03-07 No fix listed CWE-862
TI-2024-01085 CVE-2024-1170 · GHSA-hfj2-23xp-72cr

Missing authorization in themekraft Post Form – Registration Form – Profile Form for User…

Priority LOW 37

The Post Form – Registration Form – Profile Form for User Profiles – Frontend Content Forms for User Submissions (UGC) plugin for WordPress is vulnerable to unauthorized media file deletion due to a missing capability ch…

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00725 Published 2024-03-07 No fix listed CWE-862