Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Vivektamrakar Component: Wp Rest Api Fns Clear all filters
TI-2024-32922 CVE-2024-49329 · GHSA-gfqx-4g7r-4f86

WordPress WP REST API FNS plugin <= 1.0.0 - Arbitrary File Upload vulnerability

Priority MEDIUM 49

Unrestricted Upload of File with Dangerous Type vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Upload a Web Shell to a Web Server.This issue affects WP REST API FNS: from n/a through <= 1.0.0.

CVSS 3.1CRITICAL 10.0 Network No auth No interaction EPSS 0.00511 Published 2024-10-20 No fix listed CWE-434
TI-2024-32921 CVE-2024-49328 · GHSA-jgmv-vp3c-xpj5

WordPress WP REST API FNS Plugin plugin <= 1.0.0 - Account Takeover vulnerability

Priority MEDIUM 52

Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through <= 1.0.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01491 Published 2024-10-20 No fix listed CWE-288