Kau Boys

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-9224 Oct 01, 09:15 MEDIUM This Month

The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the hello_world_lyric() function. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Epss exploitation probability 50.8% and no vendor patch available.

WordPress Path Traversal Hello World Wordpress Plugin Kau Boys

NVD

CVSS 3.1

6.5

EPSS

50.8%

CVE-2023-44471 Oct 10, 15:15 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in Bernhard Kau Backend Localization plugin <= 2.1.10 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Backend Localization Kau Boys

NVD

CVSS 3.1

8.8

EPSS

0.2%

CVE-2024-9224

EPSS 51% CVSS 6.5

MEDIUM This Month

WordPress Path Traversal Hello World +2

NVD

CVE-2023-44471

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Backend Localization Kau Boys

NVD