10Webanalytics

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-47807 Jan 02, 15:15 MEDIUM This Month

Missing Authorization vulnerability in 10Web 10WebAnalytics allows Exploiting Incorrectly Configured Access Control Security Levels.2.12. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass 10Webanalytics Wordpress Plugin 10Web

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2020-36756 Jul 12, 07:15 MEDIUM PATCH This Month

The 10WebAnalytics plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.8. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Cross-Site Request Forgery (CSRF) vulnerability could allow attackers to trick authenticated users into performing unintended actions.

WordPress CSRF 10Webanalytics Wordpress Plugin 10Web

NVD

CVSS 3.1

4.3

EPSS

0.2%

CVE-2023-47807

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress Authentication Bypass 10Webanalytics +2

NVD

CVE-2020-36756

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress CSRF 10Webanalytics +2

NVD