Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: matthewrubin Clear all filters
TI-2025-23701 CVE-2025-32636 · GHSA-xjmf-cg3p-vmcm

WordPress Local Magic plugin <= 2.9.0 - SQL Injection vulnerability

Priority MEDIUM 46

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in matthewrubin Local Magic local-magic allows SQL Injection.This issue affects Local Magic: from n/a through <= 2.9.0.

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00375 Published 2025-04-17 No fix listed CWE-89
TI-2025-22995 CVE-2025-31858 · GHSA-33g5-pmx8-956p

WordPress Local Magic plugin <= 2.9.0 - Broken Access Control vulnerability

Priority LOW 35

Missing Authorization vulnerability in matthewrubin Local Magic local-magic allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Local Magic: from n/a through <= 2.9.0.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00317 Published 2025-04-03 No fix listed CWE-862
TI-2025-22973 CVE-2025-31836 · GHSA-cwxf-h86q-7q6r

WordPress Review Manager plugin <= 2.5.0 - Broken Access Control vulnerability

Priority LOW 30

Missing Authorization vulnerability in matthewrubin Review Manager review-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Review Manager: from n/a through <= 2.5.0.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00455 Published 2025-04-01 No fix listed CWE-862