Skip to main content

Ombu

4 CVEs vendor

Monthly

CVE-2024-12709 Jan 30, 06:15 MEDIUM POC Monitor

The Bulk Me Now!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Bulk Me Now Ombu
NVD WPScan
CVSS 3.1
4.3
EPSS
0.1%
CVE-2024-12708 Jan 30, 06:15 HIGH POC This Month

The Bulk Me Now!. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Bulk Me Now Ombu
NVD WPScan
CVSS 3.1
7.1
EPSS
0.1%
CVE-2024-12638 Jan 30, 06:15 HIGH POC This Week

The Bulk Me Now!. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Bulk Me Now Ombu
NVD WPScan
CVSS 3.1
7.1
EPSS
1.6%
CVE-2021-24399 Sep 20, 10:15 HIGH POC This Week

The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi The Sorter Ombu
NVD WPScan
CVSS 3.1
7.2
EPSS
1.5%
EPSS 0% CVSS 4.3
MEDIUM POC Monitor

The Bulk Me Now!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress CSRF Bulk Me Now +1
NVD WPScan
EPSS 0% CVSS 7.1
HIGH POC This Month

The Bulk Me Now!. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Bulk Me Now +1
NVD WPScan
EPSS 2% CVSS 7.1
HIGH POC This Week

The Bulk Me Now!. Rated high severity (CVSS 7.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

WordPress XSS Bulk Me Now +1
NVD WPScan
EPSS 1% CVSS 7.2
HIGH POC This Week

The check_order function of The Sorter WordPress plugin through 1.0 uses an `area_id` parameter which is not sanitised, escaped or validated before inserting to a SQL statement, leading to SQL. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

WordPress SQLi The Sorter +1
NVD WPScan

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy