CRUDLab records

4 published records for vendor crudlab.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2019-13344Proof of concept	An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to crudlab · wp like button · CWE-306 Pre-auth Auth bypass	Medium5.3	—	45.0%	Jul 5, 2019
35Monitor	CVE-2023-40199No exploit	WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)crudlab · wp like button · CWE-352 Pre-auth CSRF	High8.8	—	0.2%	Oct 3, 2023
24Monitor	CVE-2023-32965No exploit	WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)crudlab · jazz popups · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jul 18, 2023
24Monitor	CVE-2023-32966No exploit	WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSScrudlab · jazz popups · CWE-352 Pre-auth XSS CSRF	Medium6.1	—	0.2%	Nov 7, 2023

CVE-2019-13344
35Monitor
An authentication bypass vulnerability in the CRUDLab WP Like Button plugin through 1.6.0 for WordPress allows unauthenticated attackers to
MediumCVSS 5.3Proof of conceptEPSS 45%
- Pre-auth
- Auth bypass
crudlab · wp like buttonJul 5, 2019
CVE-2023-40199
35Monitor
WordPress WP Like Button Plugin <= 1.7.0 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
crudlab · wp like buttonOct 3, 2023
CVE-2023-32965
24Monitor
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
crudlab · jazz popupsJul 18, 2023
CVE-2023-32966
24Monitor
WordPress Jazz Popups Plugin <= 1.8.7 is vulnerable to Cross Site Request Forgery (CSRF) leading to Stored XSS
MediumCVSS 6.1No exploitEPSS 0%
crudlab · jazz popupsNov 7, 2023