Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

6 records

Vendor: ce21com Clear all filters
TI-2025-10077 CVE-2025-11007 · GHSA-5m5x-66vw-r2rp

CE21 Suite 2.2.1 - 2.3.1 - Missing Authorization to Unauthenticated Privilege Escalation via Plugin Settings Update

Priority MEDIUM 49

The CE21 Suite plugin for WordPress is vulnerable to unauthorized plugin settings update due to a missing capability check on the wp_ajax_nopriv_ce21_single_sign_on_save_api_settings AJAX action in versions 2.2.1 to 2.3.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0046 Published 2025-11-04 No fix listed CWE-306
TI-2024-09530 CVE-2024-10285 · GHSA-c545-ccpc-555g

CE21 Suite <= 2.2.0 - JWT Token Disclosure

Priority MEDIUM 50

The CE21 Suite plugin for WordPress is vulnerable to sensitive information disclosure via the plugin-log.txt in versions up to, and including, 2.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00617 Published 2024-11-09 No fix listed CWE-200
TI-2024-09529 CVE-2024-10284 · GHSA-wvhj-3792-hf6c

CE21 Suite <= 2.2.0 - Authentication Bypass

Priority MEDIUM 49

The CE21 Suite plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 2.2.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00411 Published 2024-11-09 No fix listed CWE-288