Skip to main content

Matbao

3 CVEs vendor

Monthly

CVE-2024-9065 Oct 10, 02:15 MEDIUM This Month

The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wp Helper Premium Wordpress Plugin Matbao
NVD
CVSS 3.1
5.3
EPSS
0.5%
CVE-2023-46614 Nov 09, 18:15 MEDIUM This Month

A vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite.5.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wp Helper Premium Wordpress Plugin Matbao
NVD
CVSS 3.1
5.4
EPSS
0.1%
CVE-2023-0448 Jan 26, 21:18 MEDIUM POC THREAT This Month

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wp Helper Premium Matbao
NVD
CVSS 3.1
6.1
EPSS
44.5%
EPSS 0% CVSS 5.3
MEDIUM This Month

The WP Helper Premium plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'whp_smtp_send_mail_test' function in all versions up to, and. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wp Helper Premium +2
NVD
EPSS 0% CVSS 5.4
MEDIUM This Month

A vulnerability in Mat Bao Corporation WP Helper Premium wp-helper-lite.5.1. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Wp Helper Premium +2
NVD
EPSS 45% CVSS 6.1
MEDIUM POC THREAT This Month

The WP Helper Lite WordPress plugin, in versions < 4.3, returns all GET parameters unsanitized in the response, resulting in a reflected cross-site scripting vulnerability. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Wp Helper Premium +1
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy