Skip to content
Noroxi

WPBrigade records

10 published records for vendor wpbrigade.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
20%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 21
  3. 22
  4. 23
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

10 records
  • CVE-2019-15872
    40Plan

    The LoginPress plugin before 1.1.4 for WordPress has SQL injection via an import of settings.

    CriticalCVSS 9.8No exploitEPSS 2%

    wpbrigade · loginpressSep 3, 2019

  • CVE-2022-0347
    24Monitor

    LoginPress < 1.5.12 - Reflected Cross-Site Scripting

    MediumCVSS 6.1No exploitEPSS 1%

    wpbrigade · loginpressMar 7, 2022

  • CVE-2021-24486
    21Monitor

    Simple Social Media Share Buttons < 3.2.3 - Contributor+ Stored XSS

    MediumCVSS 5.4No exploitEPSS 1%

    wpbrigade · simple social media share buttonsAug 23, 2021

  • CVE-2023-5845
    21Monitor

    Simple Social Buttons < 5.1.1 - Unauthenticated Password Protected Post Access

    MediumCVSS 5.3No exploitEPSS 1%

    wpbrigade · simple social buttonsNov 27, 2023

  • CVE-2022-4625
    21Monitor

    Login Logout Menu < 1.4.0 - Contributor+ Stored XSS in Shortcode

    MediumCVSS 5.4No exploitEPSS 1%

    wpbrigade · login logout menuJan 23, 2023

  • CVE-2022-41839
    21Monitor

    WordPress LoginPress plugin <= 1.6.2 - Broken Access Control vulnerability

    MediumCVSS 5.3No exploitEPSS 1%

    wpbrigade · loginpressNov 18, 2022

  • CVE-2022-4622
    21Monitor

    Login Logout Menu <= 1.3.3 - Contributor+ Stored XSS in Shortcode

    MediumCVSS 5.4No exploitEPSS 0%

    wpbrigade · login logout menuFeb 21, 2023

  • CVE-2021-24656
    19Monitor

    Simple Social Media Share Buttons < 3.2.4 - Authenticated Stored Cross-Site Scripting

    MediumCVSS 4.8No exploitEPSS 1%

    wpbrigade · simple social buttonsOct 11, 2021

  • CVE-2024-13610
    19Monitor

    Simple Social Media Share Buttons < 6.0.0 - Admin+ Stored XSS

    MediumCVSS 4.8No exploitEPSS 0%

    wpbrigade · simple social buttonsApr 15, 2025

  • CVE-2019-15871
    17Monitor

    The LoginPress plugin before 1.1.4 for WordPress has no capability check for updates to settings.

    MediumCVSS 4.3No exploitEPSS 1%

    wpbrigade · loginpressSep 3, 2019