Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Vendor: soumettre Clear all filters
TI-2025-04153 CVE-2025-4654 · GHSA-rp73-795v-cr5f

Soumettre.fr <= 2.1.5 - Improper Authorization to Unauthenticated Soumettre Posts Creation/Modification/Deletion

Priority LOW 17

The Soumettre.fr plugin for WordPress is vulnerable to unauthorized access and modification of data due to a improper authorization checks on the make_signature function in all versions up to, and including, 2.1.5.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00258 Published 2025-07-02 No fix listed CWE-285
TI-2024-08047 CVE-2024-8675 · GHSA-5pwq-wp5g-57fv

Soumettre.fr <= 2.1.3 - Missing Authorization

Priority LOW 20

The Soumettre.fr plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the soumettre_disconnect_gateway function in all versions up to, and including, 2.1.3.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00343 Published 2024-10-01 No fix listed CWE-862