usabilitydynamics records
8 published records for vendor usabilitydynamics.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-668 Exposure of Resource to Wrong Sphere5
- CWE-1236 Improper Neutralization of Formula Elements in a CSV File1
- CWE-269 Improper Privilege Management1
- CWE-352 Cross-Site Request Forgery (CSRF)1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
31Monitor | CVE-2022-1202No exploit | WP-CRM <= 1.2.1 - CSV Injectionusabilitydynamics · wp-crm · CWE-1236 | High7.8 | — | 1.0% | Jun 13, 2022 |
26Monitor | CVE-2016-11011No exploit | The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.usabilitydynamics · wp-invoice · CWE-269 | Medium6.5 | — | 1.4% | Sep 20, 2019 |
24Monitor | CVE-2022-1617No exploit | WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRFusabilitydynamics · wp-invoice · CWE-352 | Medium6.1 | — | 0.3% | Jan 16, 2024 |
22Monitor | CVE-2016-11007No exploit | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.usabilitydynamics · wp-invoice · CWE-668 | Medium5.3 | — | 2.0% | Sep 20, 2019 |
22Monitor | CVE-2016-11010No exploit | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.usabilitydynamics · wp-invoice · CWE-668 | Medium5.3 | — | 1.8% | Sep 20, 2019 |
22Monitor | CVE-2016-11008No exploit | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.usabilitydynamics · wp-invoice · CWE-668 | Medium5.3 | — | 1.8% | Sep 20, 2019 |
22Monitor | CVE-2016-11009No exploit | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.usabilitydynamics · wp-invoice · CWE-668 | Medium5.3 | — | 1.8% | Sep 20, 2019 |
22Monitor | CVE-2016-11006No exploit | The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.usabilitydynamics · wp-invoice · CWE-668 | Medium5.3 | — | 1.8% | Sep 20, 2019 |
- CVE-2022-120231Monitor
WP-CRM <= 1.2.1 - CSV Injection
HighCVSS 7.8No exploitEPSS 1%usabilitydynamics · wp-crmJun 13, 2022
- CVE-2016-1101126Monitor
The wp-invoice plugin before 4.1.1 for WordPress has wpi_update_user_option privilege escalation.
MediumCVSS 6.5No exploitEPSS 1%usabilitydynamics · wp-invoiceSep 20, 2019
- CVE-2022-161724Monitor
WP-Invoice <= 4.3.1 - Stored Cross-Site Scripting via CSRF
MediumCVSS 6.1No exploitEPSS 0%usabilitydynamics · wp-invoiceJan 16, 2024
- CVE-2016-1100722Monitor
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_user_id for invoice retrieval.
MediumCVSS 5.3No exploitEPSS 2%usabilitydynamics · wp-invoiceSep 20, 2019
- CVE-2016-1101022Monitor
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_twocheckout payer metadata updates.
MediumCVSS 5.3No exploitEPSS 2%usabilitydynamics · wp-invoiceSep 20, 2019
- CVE-2016-1100822Monitor
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_paypal payer metadata updates.
MediumCVSS 5.3No exploitEPSS 2%usabilitydynamics · wp-invoiceSep 20, 2019
- CVE-2016-1100922Monitor
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control over wpi_interkassa payer metadata updates.
MediumCVSS 5.3No exploitEPSS 2%usabilitydynamics · wp-invoiceSep 20, 2019
- CVE-2016-1100622Monitor
The wp-invoice plugin before 4.1.1 for WordPress has incorrect access control for admin_init settings changes.
MediumCVSS 5.3No exploitEPSS 2%usabilitydynamics · wp-invoiceSep 20, 2019