Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Vendor: TienCOP Clear all filters
TI-2023-24839 CVE-2023-46212 · GHSA-mcch-629j-3qrw

WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control

Priority LOW 38

Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00254 Published 2023-12-18 No fix listed CWE-352
TI-2023-04887 CVE-2023-5314 · GHSA-h572-9c8v-9vqh

WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending

Priority LOW 20

The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capability check on the 'test-email' section of the register() function in versions up to, and including…

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00471 Published 2023-11-22 No fix listed CWE-862
TI-2023-04885 CVE-2023-5311 · GHSA-p3gw-wp5c-9ccx

WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification

Priority MEDIUM 44

The WP EXtra plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the register() function in versions up to, and including, 6.2.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01851 Published 2023-10-25 No fix listed CWE-862