wpvar records
3 published records for vendor wpvar.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls1
- CWE-352 Cross-Site Request Forgery (CSRF)1
- CWE-862 Missing Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
26Monitor | CVE-2023-0335No exploit | WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletionwpvar · wp shamsi · CWE-352 | Medium6.5 | — | 1.0% | Mar 27, 2023 |
21Monitor | CVE-2022-4555No exploit | WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivationwpvar · wp shamsi · CWE-862 | Medium5.3 | — | 0.7% | Dec 16, 2022 |
17Monitor | CVE-2022-38058No exploit | WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerabilitywpvar · wp shamsi · CWE-264 | Medium4.3 | — | 0.6% | Sep 9, 2022 |
- CVE-2023-033526Monitor
WP Shamsi <= 4.3.3 - Subscriber+ Attachment Deletion
MediumCVSS 6.5No exploitEPSS 1%wpvar · wp shamsiMar 27, 2023
- CVE-2022-455521Monitor
WP Shamsi <= 4.1.0 - Missing Authorization to Arbitrary Plugin Deactivation
MediumCVSS 5.3No exploitEPSS 1%wpvar · wp shamsiDec 16, 2022
- CVE-2022-3805817Monitor
WordPress WP Shamsi plugin <= 4.1.1 - Authenticated Plugin Setting change vulnerability
MediumCVSS 4.3No exploitEPSS 1%wpvar · wp shamsiSep 9, 2022