ivanm records
2 published records for vendor ivanm.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
2 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2024-13720No exploit | WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletionivanm · wp image uploader · CWE-352 | Critical9.1 | — | 0.5% | Jan 30, 2025 |
32Monitor | CVE-2024-13707No exploit | WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletionivanm · wp image uploader · CWE-352 | High8.1 | — | 0.2% | Jan 30, 2025 |
- CVE-2024-1372036Monitor
WP Image Uploader <= 1.0.1 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Deletion
CriticalCVSS 9.1No exploitEPSS 1%ivanm · wp image uploaderJan 30, 2025
- CVE-2024-1370732Monitor
WP Image Uploader <= 1.0.1 - Cross-Site Request Forgery to Arbitrary File Deletion
HighCVSS 8.1No exploitEPSS 0%ivanm · wp image uploaderJan 30, 2025