Skip to content
Noroxi

draftpress records

5 published records for vendor draftpress.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22
  3. 23

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

5 records
  • CVE-2023-39989
    35Monitor

    WordPress Header Footer Code Manager Plugin <= 1.1.34 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    draftpress · header footer code managerOct 3, 2023

  • CVE-2021-24791
    30Monitor

    Header Footer Code Manager < 1.1.14 - Admin+ SQL Injections

    HighCVSS 7.2Proof of conceptEPSS 5%

    draftpress · header footer code managerNov 8, 2021

  • CVE-2022-0710
    25Monitor

    Header Footer Code Manager <= 1.1.16 Reflected XSS

    MediumCVSS 6.1No exploitEPSS 2%

    draftpress · header footer code managerFeb 24, 2022

  • CVE-2022-0899
    24Monitor

    Header Footer Code Manager < 1.1.24 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 1%

    draftpress · header footer code managerJul 25, 2022

  • CVE-2021-24445
    22Monitor

    My Site Audit <= 1.2.4 - Authenticated Stored Cross-Site Scripting (XSS)

    MediumCVSS 5.5No exploitEPSS 1%

    draftpress · my site auditAug 16, 2021