Katieseaborn

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-7429 Nov 05, 10:21 MEDIUM PATCH This Month

The Zotpress plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the Zotpress_process_accounts_AJAX function in all versions up to, and. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.

WordPress Authentication Bypass Zotpress Wordpress Plugin Katieseaborn

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2024-30488 Mar 29, 14:15 HIGH This Week

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Katie Zotpress zotpress.3.7. Rated high severity (CVSS 8.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress SQLi Zotpress Wordpress Plugin Katieseaborn

NVD VulDB

CVSS 3.1

8.5

EPSS

0.4%

CVE-2023-46313 Oct 31, 10:15 MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Zotpress Katieseaborn

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2024-7429

EPSS 0% CVSS 4.3

MEDIUM PATCH This Month

WordPress Authentication Bypass Zotpress +2

NVD

CVE-2024-30488

EPSS 0% CVSS 8.5

HIGH This Week

WordPress SQLi Zotpress +2

NVD VulDB

CVE-2023-46313

EPSS 0% CVSS 6.1

MEDIUM This Month

Unauth. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Zotpress Katieseaborn

NVD