Skip to content
Noroxi

underconstruction project records

4 published records for vendor underconstruction project.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 21
  2. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2013-2699
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in the underConstruction plugin before 1.09 for WordPress allows remote attackers to hijack

    MediumCVSS 6.8No exploitEPSS 1%

    underconstruction project · underconstructionApr 10, 2014

  • CVE-2021-39320
    25Monitor

    underConstruction <= 1.18 - Reflected Cross-Site Scripting

    MediumCVSS 6.1Proof of conceptEPSS 2%

    underconstruction project · underconstructionSep 1, 2021

  • CVE-2022-1896
    19Monitor

    underConstruction < 1.21 - Admin+ Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 0%

    underconstruction project · underconstructionJun 20, 2022

  • CVE-2022-1895
    17Monitor

    underConstruction < 1.20 - Construction Mode Deactivation via CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    underconstruction project · underconstructionJun 20, 2022