Upqode records
4 published records for vendor upqode.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-30544No exploit | WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerabilityupqode · whizzy · CWE-862 | Critical9.8 | — | 0.4% | Jun 9, 2024 |
33Monitor | CVE-2024-38744No exploit | WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerabilityupqode · plum: spin wheel & email pop-up · CWE-862 | High8.3 | — | 0.3% | Nov 1, 2024 |
26Monitor | CVE-2024-30543No exploit | WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerabilityupqode · whizzy · CWE-639 | Medium6.5 | — | 0.4% | Mar 31, 2024 |
21Monitor | CVE-2024-38743No exploit | WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerabilityupqode · plum: spin wheel & email pop-up · CWE-862 | Medium5.3 | — | 0.4% | Nov 1, 2024 |
- CVE-2024-3054439Monitor
WordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%upqode · whizzyJun 9, 2024
- CVE-2024-3874433Monitor
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerability
HighCVSS 8.3No exploitEPSS 0%upqode · plum: spin wheel & email pop-upNov 1, 2024
- CVE-2024-3054326Monitor
WordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerability
MediumCVSS 6.5No exploitEPSS 0%upqode · whizzyMar 31, 2024
- CVE-2024-3874321Monitor
WordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerability
MediumCVSS 5.3No exploitEPSS 0%upqode · plum: spin wheel & email pop-upNov 1, 2024