Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: Shaon Clear all filters
TI-2023-09686 CVE-2023-23887 · GHSA-pc2p-cpvm-qg7r

WordPress Easy Google Analytics for WordPress plugin <= 1.6.0 - Broken Access Control vulnerability

Priority LOW 31

Missing Authorization vulnerability in Shaon Easy Google Analytics for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Google Analytics for WordPress: from n/a th…

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00573 Published 2024-12-09 No fix listed CWE-862
TI-2024-08989 CVE-2024-9689 · GHSA-pcmq-5pjg-9prg

Post From Frontend <= 1.0.0 - Post Deletion via CSRF

Priority MEDIUM 53

The Post From Frontend WordPress plugin through 1.0.0 does not have CSRF check when deleting posts, which could allow attackers to make logged in admin perform such action via a CSRF attack

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00222 Published 2024-11-05 No fix listed CWE-352