Skip to main content

Wheel Of Life

2 CVEs product

Monthly

CVE-2024-47311 Nov 01, 15:15 MEDIUM This Month

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.1.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wheel Of Life Wordpress Plugin Kraftplugins
NVD
CVSS 3.1
5.3
EPSS
0.5%
CVE-2024-3627 Jun 20, 02:15 MEDIUM This Month

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass Wheel Of Life Wordpress Plugin +1
NVD
CVSS 3.1
5.4
EPSS
0.1%
EPSS 0% CVSS 5.3
MEDIUM This Month

Missing Authorization vulnerability in Kraft Plugins Wheel of Life wheel-of-life allows Exploiting Incorrectly Configured Access Control Security Levels.1.8. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

WordPress Authentication Bypass Wheel Of Life +2
NVD
EPSS 0% CVSS 5.4
MEDIUM This Month

The Wheel of Life: Coaching and Assessment Tool for Life Coach plugin for WordPress is vulnerable to unauthorized modification and loss of data due to a missing capability check on several functions. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

PHP WordPress Authentication Bypass +3
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy