Skip to content
Noroxi

PeepSo records

15 published records for vendor peepso.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
73.3%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 23
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

15 records
  • CVE-2016-10968
    35Monitor

    The peepso-core plugin before 1.6.1 for WordPress has PeepSoProfilePreferencesAjax->save() privilege escalation.

    HighCVSS 8.8No exploitEPSS 1%

    peepso · peepsoSep 16, 2019

  • CVE-2023-32092
    35Monitor

    WordPress Community by PeepSo Plugin <= 6.0.9.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    peepso · peepsoNov 9, 2023

  • CVE-2023-25967
    35Monitor

    WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    peepso · peepsoMay 3, 2023

  • CVE-2023-39925
    35Monitor

    WordPress Community by PeepSo Plugin <= 6.1.6.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    peepso · peepsoNov 22, 2023

  • CVE-2022-41633
    35Monitor

    WordPress Community by PeepSo Plugin <= 6.0.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

    HighCVSS 8.8No exploitEPSS 0%

    peepso · peepsoApr 4, 2023

  • CVE-2024-0187
    24Monitor

    Community by PeepSo < 6.3.1.2 - Reflected XSS

    MediumCVSS 6.1No exploitEPSS 0%

    peepso · peepsoJan 16, 2024

  • CVE-2023-48746
    24Monitor

    WordPress Community by PeepSo Plugin <= 6.2.6.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 6.1No exploitEPSS 0%

    peepso · peepsoNov 30, 2023

  • CVE-2023-27630
    21Monitor

    WordPress Community by PeepSo plugin <= 6.0.9.0 - Server Information Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    peepso · community by peepsoMar 26, 2024

  • CVE-2024-7426
    21Monitor

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.6.0 - Unauthenticated Full Path Disclosure

    MediumCVSS 5.3No exploitEPSS 0%

    peepso · peepsoSep 24, 2024

  • CVE-2024-25923
    21Monitor

    WordPress Community by PeepSo plugin <= 6.2.7.0 - Sensitive Data Exposure via Log File vulnerability

    MediumCVSS 5.3No exploitEPSS 0%

    peepso · community by peepsoMar 28, 2024

  • CVE-2023-47850
    21Monitor

    WordPress Community by PeepSo Plugin <= 6.2.2.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    peepso · peepsoNov 30, 2023

  • CVE-2024-22158
    21Monitor

    WordPress PeepSo Core: Photos Plugin < 6.3.1.0 is vulnerable to Cross Site Scripting (XSS)

    MediumCVSS 5.4No exploitEPSS 0%

    peepso · peepsoJan 31, 2024

  • CVE-2024-7618
    19Monitor

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting via conten

    MediumCVSS 4.8No exploitEPSS 0%

    peepso · peepsoSep 10, 2024

  • CVE-2024-7655
    19Monitor

    Community by PeepSo – Social Network, Membership, Registration, User Profiles <= 6.4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    peepso · peepsoSep 10, 2024

  • CVE-2023-7125
    17Monitor

    Community by PeepSo < 6.3.1.2 - User Post Creation via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    peepso · peepsoJan 16, 2024