Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: phoeniixx Clear all filters
TI-2024-04238 CVE-2024-4552 · GHSA-4xfp-fcw8-3q4p

Social Login Lite For WooCommerce <= 1.6.0 - Authentication Bypass

Priority MEDIUM 50

The Social Login Lite For WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.6.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00575 Published 2024-06-04 No fix listed CWE-288
TI-2021-07077 CVE-2021-24795 · GHSA-7ww6-pfhx-xq3v

Filter Portfolio Gallery <= 1.5 - Arbitrary Gallery Deletion via CSRF

Priority LOW 30

The Filter Portfolio Gallery WordPress plugin through 1.5 is lacking Cross-Site Request Forgery (CSRF) check when deleting a Gallery, which could allow attackers to make a logged in admin delete arbitrary Gallery.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00549 Published 2021-12-13 No fix listed CWE-352