Full Customer

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4243 Aug 09, 04:15 HIGH This Week

The FULL - Customer plugin for WordPress is vulnerable to Arbitrary File Upload via the /install-plugin REST route in versions up to, and including, 2.2.3 due to improper authorization. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass File Upload Full Customer Wordpress Plugin

NVD

CVSS 3.1

8.8

EPSS

0.5%

CVE-2023-4242 Aug 09, 04:15 MEDIUM This Month

The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Information Disclosure Full Customer Wordpress Plugin

NVD

CVSS 3.1

4.3

EPSS

0.1%

CVE-2023-4243

EPSS 1% CVSS 8.8

HIGH This Week

WordPress Authentication Bypass File Upload +2

NVD

CVE-2023-4242

EPSS 0% CVSS 4.3

MEDIUM This Month

WordPress Authentication Bypass Information Disclosure +2

NVD