Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: kraftplugins Component: Wheel Of Life Clear all filters
TI-2024-31629 CVE-2024-47311 · GHSA-455r-x3fg-cvp2

WordPress Wheel of Life plugin <= 1.1.8 - Broken Access Control vulnerability

Priority MEDIUM 48

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Wheel of Life: from n/a through <= 1.1.8.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00387 Published 2024-11-01 No fix listed CWE-862
TI-2024-03382 CVE-2024-3627 · GHSA-prph-5cfv-59c9

Wheel of Life: Coaching and Assessment Tool for Life Coach <= 1.1.7 - Missing Authorization on Several AJAX Endpoints

Priority LOW 25

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions in the AjaxFunctions.…

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00388 Published 2024-06-20 No fix listed CWE-862