wpkube records

11 published records for vendor wpkube.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 2
With a fix record: 27.3%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

11 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2021-4362No exploit	The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_wpkube · kiwi social share · CWE-862 Pre-auth Broken access control (IDOR)	Critical9.8	—	1.4%	Jun 6, 2023
30Monitor	CVE-2024-31249No exploit	WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerabilitywpkube · subscribe to comments reloaded · CWE-532 Pre-auth Info leak	High7.5	—	0.5%	Apr 10, 2024
29Monitor	CVE-2024-10952No exploit	Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajaxwpkube · authors list · CWE-94 pre-auth RCE	High7.3	—	0.5%	Dec 3, 2024
26Monitor	CVE-2024-4144No exploit	Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Executionwpkube · simple basic contact form · CWE-94 pre-auth RCE	Medium6.5	—	0.6%	May 14, 2024
24Monitor	CVE-2023-37981No exploit	WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)wpkube · authors list · CWE-79 Pre-auth XSS	Medium6.1	—	0.3%	Jul 27, 2023
21Monitor	CVE-2021-24682No exploit	Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scriptingwpkube · cool tag cloud · CWE-79 XSS	Medium5.4	—	0.6%	Nov 1, 2021
21Monitor	CVE-2021-24745No exploit	About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scriptingwpkube · about author box · CWE-79 XSS	Medium5.4	—	0.6%	Nov 29, 2021
21Monitor	CVE-2024-3228No exploit	Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosurewpkube · kiwi social share · CWE-200 Pre-auth Info leak	Medium5.3	—	0.4%	Jul 9, 2024
21Monitor	CVE-2022-29414No exploit	WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilitieswpkube · subscribe to comments reloaded · CWE-352 Pre-auth CSRF	Medium5.4	—	0.3%	Apr 29, 2022
19Monitor	CVE-2022-4226No exploit	Simple Basic Contact Form < 20221201 - Admin+ Stored XSSwpkube · simple basic contact form · CWE-79 XSS	Medium4.8	—	0.5%	Dec 26, 2022
19Monitor	CVE-2024-12716No exploit	Simple Basic Contact Form < 20250114 - Admin+ Stored XSSwpkube · simple basic contact form · CWE-79 XSS	Medium4.8	—	0.3%	May 15, 2025

CVE-2021-4362
39Monitor
The Kiwi Social Share plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on the kiwi_social_share_
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Broken access control (IDOR)
wpkube · kiwi social shareJun 6, 2023
CVE-2024-31249
30Monitor
WordPress Subscribe To Comments Reloaded plugin <= 220725 - Sensitive Data Exposure vulnerability
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Info leak
wpkube · subscribe to comments reloadedApr 10, 2024
CVE-2024-10952
29Monitor
Authors List <= 2.0.4 - Unauthenticated Arbitrary Shortcode Execution via update_authors_list_ajax
HighCVSS 7.3No exploitEPSS 0%
- pre-auth RCE
wpkube · authors listDec 3, 2024
CVE-2024-4144
26Monitor
Simple Basic Contact Form <= 20240502 - Unauthenticated Arbitrary Shortcode Execution
MediumCVSS 6.5No exploitEPSS 0%
- pre-auth RCE
wpkube · simple basic contact formMay 14, 2024
CVE-2023-37981
24Monitor
WordPress Authors List Plugin <= 2.0.2 is vulnerable to Cross Site Scripting (XSS)
MediumCVSS 6.1No exploitEPSS 0%
- Pre-auth
- XSS
wpkube · authors listJul 27, 2023
CVE-2021-24682
21Monitor
Cool Tag Cloud < 2.26 - Contributor+ Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpkube · cool tag cloudNov 1, 2021
CVE-2021-24745
21Monitor
About Author Box < 1.0.2 - Contributor+ Stored Cross-Site Scripting
MediumCVSS 5.4No exploitEPSS 0%
- XSS
wpkube · about author boxNov 29, 2021
CVE-2024-3228
21Monitor
Social Sharing Plugin – Kiwi <= 2.1.7 - Information Disclosure
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
- Info leak
wpkube · kiwi social shareJul 9, 2024
CVE-2022-29414
21Monitor
WordPress Subscribe To Comments Reloaded plugin <= 211130 - Multiple Cross-Site Request Forgery (CSRF) vulnerabilities
MediumCVSS 5.4No exploitEPSS 0%
- Pre-auth
- CSRF
wpkube · subscribe to comments reloadedApr 29, 2022
CVE-2022-4226
19Monitor
Simple Basic Contact Form < 20221201 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
wpkube · simple basic contact formDec 26, 2022
CVE-2024-12716
19Monitor
Simple Basic Contact Form < 20250114 - Admin+ Stored XSS
MediumCVSS 4.8No exploitEPSS 0%
- XSS
wpkube · simple basic contact formMay 15, 2025