Sign in Free assessment

bytesforall records

4 published records for vendor bytesforall.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

22
24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2024-27948No exploit	WordPress Atahualpa Theme <= 3.7.24 is vulnerable to Cross Site Request Forgery (CSRF)bytesforall · atahualpa · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Feb 28, 2024
21Monitor	CVE-2017-20085No exploit	Atahualpa Theme cross site scritingbytesforall · atahualpa · CWE-80 XSS	Medium5.4	—	0.5%	Jun 23, 2022
18Monitor	CVE-2011-3850Proof of concept	Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web swordpress · wordpress · CWE-79 Pre-auth XSS	Medium4.3	—	4.3%	Sep 28, 2011
17Monitor	CVE-2017-20088No exploit	Atahualpa Theme cross-site request forgerybytesforall · atahualpa · CWE-352 Pre-auth CSRF	Medium4.3	—	0.4%	Jun 23, 2022

CVE-2024-27948
35Monitor
WordPress Atahualpa Theme <= 3.7.24 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
bytesforall · atahualpaFeb 28, 2024
CVE-2017-20085
21Monitor
Atahualpa Theme cross site scriting
MediumCVSS 5.4No exploitEPSS 1%
- XSS
bytesforall · atahualpaJun 23, 2022
CVE-2011-3850
18Monitor
Cross-site scripting (XSS) vulnerability in the Atahualpa theme before 3.6.8 for WordPress allows remote attackers to inject arbitrary web s
MediumCVSS 4.3Proof of conceptEPSS 4%
- Pre-auth
- XSS
wordpress · wordpressSep 28, 2011
CVE-2017-20088
17Monitor
Atahualpa Theme cross-site request forgery
MediumCVSS 4.3No exploitEPSS 0%
- Pre-auth
- CSRF
bytesforall · atahualpaJun 23, 2022