Skip to content
Noroxi

caseproof records

12 published records for vendor caseproof.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
16.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 24
  6. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

12 records
  • CVE-2024-43956
    39Monitor

    WordPress MemberPress plugin <= 1.11.34 - Broken Access Control vulnerability

    CriticalCVSS 9.8No exploitEPSS 0%

    caseproof · memberpressNov 1, 2024

  • CVE-2024-11299
    30Monitor

    Memberpress <= 1.11.37 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

    HighCVSS 7.5No exploitEPSS 0%

    caseproof · memberpressApr 22, 2025

  • CVE-2015-9457
    29Monitor

    The pretty-link plugin before 1.6.8 for WordPress has PrliLinksController::list_links SQL injection via the group parameter.

    HighCVSS 7.2No exploitEPSS 1%

    caseproof · prettylinksOct 10, 2019

  • CVE-2011-4595
    25Monitor

    Pretty-Link WordPress plugin 1.5.2 has XSS

    MediumCVSS 6.1Proof of conceptEPSS 2%

    caseproof · prettylinksJan 10, 2020

  • CVE-2024-5031
    25Monitor

    MemberPress <= 1.11.29 - Authenticated (Contributor+) Blind Server-Side Request Forgery via mepr-user-file Shortcode

    MediumCVSS 6.4No exploitEPSS 0%

    caseproof · memberpressMay 22, 2024

  • CVE-2024-1412
    24Monitor

    Memberpress <= 1.11.24 - Reflected Cross-Site Scripting via message and error

    MediumCVSS 6.1No exploitEPSS 0%

    caseproof · memberpressApr 9, 2024

  • CVE-2021-24127
    21Monitor

    ThirstyAffiliates < 3.9.3 - Authenticated Stored XSS

    MediumCVSS 5.4No exploitEPSS 0%

    caseproof · thirstyaffiliates affiliate link managerMar 18, 2021

  • CVE-2022-0398
    21Monitor

    ThirstyAffiliates Affiliate Link Manager < 3.10.5 - Subscriber+ Arbitrary Affiliate Links Creation

    MediumCVSS 5.4No exploitEPSS 0%

    caseproof · thirstyaffiliates affiliate link managerApr 25, 2022

  • CVE-2024-5025
    21Monitor

    MemberPress <= 1.11.29 - Authenticated (Contributor+) Stored Cross-Site Scripting via arglist Parameter

    MediumCVSS 5.4No exploitEPSS 0%

    caseproof · memberpressMay 22, 2024

  • CVE-2013-1636
    19Monitor

    Cross-site scripting (XSS) vulnerability in open-flash-chart.swf in Open Flash Chart (aka Open-Flash Chart), as used in the Pretty Link Lite

    MediumCVSS 4.3Proof of conceptEPSS 6%

    caseproof · prettylinksMar 12, 2014

  • CVE-2022-0634
    17Monitor

    ThirstyAffiliates < 3.10.5 - Subscriber+ unauthorized image upload + CSRF

    MediumCVSS 4.3No exploitEPSS 0%

    caseproof · thirstyaffiliates affiliate link managerApr 25, 2022

  • CVE-2024-2326
    17Monitor

    Pretty Links – Affiliate Links, Link Branding, Link Tracking & Marketing Plugin <= 3.6.3 - Cross-Site Request Forgery to Plugin Settings Update

    MediumCVSS 4.3No exploitEPSS 0%

    caseproof · prettylinksMar 23, 2024