Skip to main content

Exeebit

3 CVEs vendor

Monthly

CVE-2024-13336 Feb 19, 09:15 MEDIUM This Month

The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Disable Auto Updates Wordpress Plugin Exeebit
NVD
CVSS 3.1
4.3
EPSS
0.0%
CVE-2024-35776 Jun 21, 13:15 HIGH This Week

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo() WP.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Phpinfo Wp Exeebit
NVD
CVSS 3.1
7.5
EPSS
0.4%
CVE-2023-26542 Nov 22, 15:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Exeebit phpinfo() WP plugin <= 4.0 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Phpinfo Wp Exeebit
NVD
CVSS 3.1
8.8
EPSS
0.3%
EPSS 0% CVSS 4.3
MEDIUM This Month

The Disable Auto Updates plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 1.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Disable Auto Updates +2
NVD
EPSS 0% CVSS 7.5
HIGH This Week

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Exeebit phpinfo() WP.0. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Phpinfo Wp Exeebit
NVD
EPSS 0% CVSS 8.8
HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Exeebit phpinfo() WP plugin <= 4.0 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Phpinfo Wp Exeebit
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy