Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: Lenderd Clear all filters
TI-2022-22334 CVE-2022-45368 · GHSA-m9cw-79cj-72f5

WordPress 1003 Mortgage Application plugin <= 1.75 - Local File Inclusion

Priority LOW 35

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Lenderd 1003 Mortgage Application allows Relative Path Traversal.This issue affects 1003 Mortgage Application: from n/a thro…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00936 Published 2024-05-17 No fix listed CWE-22
TI-2024-21468 CVE-2024-32581 · GHSA-chxx-844v-jrr7

WordPress Mortgage Calculators WP plugin <= 1.56 - Cross Site Scripting (XSS) vulnerability

Priority LOW 29

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Lenderd Mortgage Calculators WP allows Stored XSS.This issue affects Mortgage Calculators WP: from n/a through 1.56.

CVSS 3.1MEDIUM 6.5 Network Low privileges User interaction EPSS 0.0032 Published 2024-04-18 No fix listed CWE-79
TI-2021-07184 CVE-2021-24904 · GHSA-r226-364c-3qcx

Mortgage Calculators WP < 1.56 - Admin+ Stored Cross-Site Scripting

Priority LOW 30

The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scr…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.05063 Published 2022-02-14 Fixed in 1.56 CWE-79