Skip to main content

Gesundheit Bewegt

4 CVEs vendor

Monthly

CVE-2024-27964 Mar 21, 17:15 HIGH This Week

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.6.9. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Zippy Gesundheit Bewegt
NVD
CVSS 3.1
8.8
EPSS
0.8%
CVE-2023-36381 Dec 28, 11:15 MEDIUM This Month

Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.6.5. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Zippy Gesundheit Bewegt
NVD
CVSS 3.1
6.6
EPSS
0.1%
CVE-2023-26533 Nov 30, 16:15 MEDIUM This Month

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.6.1. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Zippy Gesundheit Bewegt
NVD
CVSS 3.1
6.5
EPSS
0.6%
CVE-2021-24802 Nov 17, 11:15 MEDIUM POC This Month

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Colorful Categories Gesundheit Bewegt
NVD WPScan
CVSS 3.1
6.5
EPSS
0.5%
EPSS 1% CVSS 8.8
HIGH This Week

Unrestricted Upload of File with Dangerous Type vulnerability in Gesundheit Bewegt GmbH Zippy.6.9. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

File Upload Zippy Gesundheit Bewegt
NVD
EPSS 0% CVSS 6.6
MEDIUM This Month

Deserialization of Untrusted Data vulnerability in Gesundheit Bewegt GmbH Zippy.6.5. Rated medium severity (CVSS 6.6), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Deserialization Zippy Gesundheit Bewegt
NVD
EPSS 1% CVSS 6.5
MEDIUM This Month

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gesundheit Bewegt GmbH Zippy.6.1. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Zippy Gesundheit Bewegt
NVD
EPSS 1% CVSS 6.5
MEDIUM POC This Month

The Colorful Categories WordPress plugin before 2.0.15 does not enforce nonce checks which could allow attackers to make a logged in admin or editor change taxonomy colors via a CSRF attack. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Colorful Categories +1
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy