Skip to main content

Top 10

3 CVEs product

Monthly

CVE-2023-25993 Dec 09, 13:15 MEDIUM This Month

Missing Authorization vulnerability in Ajay Top 10 top-10 allows Exploiting Incorrectly Configured Access Control Security Levels.2.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Top 10 Wordpress Plugin Webberzone
NVD
CVSS 3.1
4.3
EPSS
0.2%
CVE-2023-47238 Nov 09, 19:15 MEDIUM This Month

A vulnerability in Ajay Top 10 top-10.3.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Top 10 Wordpress Plugin Webberzone
NVD
CVSS 3.1
4.3
EPSS
0.1%
CVE-2020-36761 Jul 12, 08:15 MEDIUM POC PATCH This Month

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

WordPress CSRF Top 10 Wordpress Plugin Webberzone
NVD
CVSS 3.1
4.3
EPSS
0.2%
EPSS 0% CVSS 4.3
MEDIUM This Month

Missing Authorization vulnerability in Ajay Top 10 top-10 allows Exploiting Incorrectly Configured Access Control Security Levels.2.3. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Top 10 +2
NVD
EPSS 0% CVSS 4.3
MEDIUM This Month

A vulnerability in Ajay Top 10 top-10.3.2. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress CSRF Top 10 +2
NVD
EPSS 0% CVSS 4.3
MEDIUM POC PATCH This Month

The Top 10 plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.10.4. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

WordPress CSRF Top 10 +2
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy