Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Wpruby Clear all filters
TI-2021-03217 CVE-2021-4360 · GHSA-6p6c-8qqm-q7cx

Controlled Admin Access < 1.5.6 - Privilege Escalation

Priority MEDIUM 45

The Controlled Admin Access plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 1.5.5 by not properly restricting access to the configuration page.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01153 Published 2023-06-07 Fixed in 1.5.6 CWE-284
TI-2023-01064 CVE-2023-1125 · GHSA-m535-fq8f-38fp

Ruby Help Desk < 1.3.4 - Subscriber+ Ticket Update via IDOR

Priority MEDIUM 62

The Ruby Help Desk WordPress plugin before 1.3.4 does not ensure that the ticket being modified belongs to the user making the request, allowing an attacker to close and/or add files and replies to tickets other than the…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00559 Published 2023-05-02 Fixed in 1.3.4 CWE-639