User Meta Manager

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23712 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF User Meta Manager

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2023-22718 MEDIUM This Month

Reflected Cross-Site Scripting (XSS) vulnerability in Jason Lau User Meta Manager plugin <= 3.4.9 versions. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS User Meta Manager

NVD

CVSS 3.1

6.1

EPSS

0.4%

CVE-2023-23712

EPSS 0% CVSS 8.8

HIGH This Week

CSRF User Meta Manager

NVD

CVE-2023-22718

EPSS 0% CVSS 6.1

MEDIUM This Month

XSS User Meta Manager

NVD