wpvnteam records
5 published records for vendor wpvnteam.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 60%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-352 Cross-Site Request Forgery (CSRF)2
- CWE-862 Missing Authorization2
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
5 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
36Monitor | CVE-2023-5311No exploit | WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modificationwpvnteam · wp extra · CWE-862 | High8.8 | — | 1.8% | Oct 25, 2023 |
35Monitor | CVE-2023-46623No exploit | WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)wpvnteam · wp extra · CWE-94 | High8.8 | — | 0.5% | Dec 29, 2023 |
35Monitor | CVE-2023-47825No exploit | WordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF)wpvnteam · wp extra · CWE-352 | High8.8 | — | 0.2% | Nov 22, 2023 |
35Monitor | CVE-2023-46212No exploit | WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Controlwpvnteam · wp extra · CWE-352 | High8.8 | — | 0.2% | Dec 18, 2023 |
17Monitor | CVE-2023-5314No exploit | WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sendingwpvnteam · wp extra · CWE-862 | Medium4.3 | — | 0.4% | Nov 22, 2023 |
- CVE-2023-531136Monitor
WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
HighCVSS 8.8No exploitEPSS 1%wpvnteam · wp extraOct 25, 2023
- CVE-2023-4662335Monitor
WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)
HighCVSS 8.8No exploitEPSS 0%wpvnteam · wp extraDec 29, 2023
- CVE-2023-4782535Monitor
WordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF)
HighCVSS 8.8No exploitEPSS 0%wpvnteam · wp extraNov 22, 2023
- CVE-2023-4621235Monitor
WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control
HighCVSS 8.8No exploitEPSS 0%wpvnteam · wp extraDec 18, 2023
- CVE-2023-531417Monitor
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
MediumCVSS 4.3No exploitEPSS 0%wpvnteam · wp extraNov 22, 2023