Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Seur Oficial Project Component: Seur Oficial Clear all filters
TI-2021-07282 CVE-2021-25004 · GHSA-jrh7-fghq-g8xm

SEUR Oficial < 1.7.2 - Admin+ Arbitrary File Download

Priority LOW 25

The SEUR Oficial WordPress plugin before 1.7.2 creates a PHP file with a random name when installed, even though it is used for support purposes, it allows to download any file from the web server without restriction aft…

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01156 Published 2022-02-07 Fixed in 1.7.2 CWE-552
TI-2021-07283 CVE-2021-25005 · GHSA-2hcp-6839-gvwf

SEUR Oficial < 1.7.0 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The SEUR Oficial WordPress plugin before 1.7.0 does not sanitize and escape some of its settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowe…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00605 Published 2022-01-17 Fixed in 1.7.0 CWE-79