hmplugin records

6 published records for vendor hmplugin.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-29384Proof of concept	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Uploadhmplugin · jobwp · CWE-434 Pre-auth File upload	Critical9.8	—	1.4%	Dec 20, 2023
39Monitor	CVE-2024-50459No exploit	WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerabilityhmplugin · aidwp · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	0.4%	Oct 29, 2024
35Monitor	CVE-2021-24602No exploit	HM Multiple Roles < 1.3 - Arbitrary Role Changehmplugin · hm multiple roles · CWE-269	High8.8	—	1.5%	Aug 23, 2021
35Monitor	CVE-2022-47422No exploit	WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)hmplugin · accept stripe donation - aidwp · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	Mar 14, 2023
35Monitor	CVE-2023-23705No exploit	WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)hmplugin · wordpress books gallery · CWE-352 Pre-auth CSRF	High8.8	—	0.3%	May 23, 2023
30Monitor	CVE-2023-48288No exploit	WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposurehmplugin · jobwp · CWE-200 Pre-auth Info leak	High7.5	—	0.5%	Dec 21, 2023

CVE-2023-29384
39Monitor
WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.0 is vulnerable to Arbitrary File Upload
CriticalCVSS 9.8Proof of conceptEPSS 1%
- Pre-auth
- File upload
hmplugin · jobwpDec 20, 2023
CVE-2024-50459
39Monitor
WordPress AidWP plugin <= 3.2.3 - Broken Access Control vulnerability
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Broken access control (IDOR)
hmplugin · aidwpOct 29, 2024
CVE-2021-24602
35Monitor
HM Multiple Roles < 1.3 - Arbitrary Role Change
HighCVSS 8.8No exploitEPSS 2%
hmplugin · hm multiple rolesAug 23, 2021
CVE-2022-47422
35Monitor
WordPress WordPress Stripe Donation and Payment Plugin Plugin <= 3.1.5 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
hmplugin · accept stripe donation - aidwpMar 14, 2023
CVE-2023-23705
35Monitor
WordPress Books Gallery Plugin <= 4.4.8 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- CSRF
hmplugin · wordpress books galleryMay 23, 2023
CVE-2023-48288
30Monitor
WordPress WordPress Job Board and Recruitment Plugin – JobWP Plugin <= 2.1 is vulnerable to Sensitive Data Exposure
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Info leak
hmplugin · jobwpDec 21, 2023