Vulnerabilities

TI-2024-12577 CVE-2024-13536 · GHSA-qg6g-cx48-8j37

1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

LOW 30

The 1003 Mortgage Application plugin for WordPress is vulnerable to Full Path Disclosure in all versions up to, and including, 1.87.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00396 Published 2025-01-21 No fix listed CWE-209

TI-2025-16477 CVE-2025-22591 · GHSA-9vpv-6r96-4p4x

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

LOW 20

Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 1003 Mortgage Application: fro…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00336 Published 2025-01-07 No fix listed CWE-862

TI-2025-16478 CVE-2025-22592 · GHSA-2j5j-53gg-96g7

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

LOW 39

Missing Authorization vulnerability in 8blocks 1003 Mortgage Application 1003-mortgage-application allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects 1003 Mortgage Application: from n/a th…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00401 Published 2025-01-07 No fix listed CWE-862

Vulnerabilities

Filters

1003 Mortgage Application <= 1.87 - Unauthenticated Full Path Disclosure

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability

WordPress 1003 Mortgage Application plugin <= 1.87 - Broken Access Control vulnerability