Puzzles

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-13770 HIGH This Week

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 4.2.4 via deserialization of. Rated high severity (CVSS 8.1), this vulnerability is remotely exploitable, no authentication required. No vendor patch available.

Information Disclosure WordPress PHP Deserialization Puzzles

NVD

CVSS 3.1

8.1

EPSS

0.5%

CVE-2024-13769 MEDIUM This Month

The Puzzles | WP Magazine / Review with Store WordPress Theme + RTL theme for WordPress is vulnerable to Stored Cross-Site Scripting due to a missing capability check on the. Rated medium severity (CVSS 6.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass XSS Puzzles

NVD

CVSS 3.1

6.4

EPSS

0.1%

CVE-2024-13770

EPSS 0% CVSS 8.1

HIGH This Week

Information Disclosure WordPress PHP +2

NVD

CVE-2024-13769

EPSS 0% CVSS 6.4

MEDIUM This Month

WordPress Authentication Bypass XSS +1

NVD