Whmcs

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2024-9193 CRITICAL POC THREAT Emergency

The WHMpress - WHMCS WordPress Integration Plugin plugin for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 6.3-revision-0 via the. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Epss exploitation probability 29.2% and no vendor patch available.

Information Disclosure PHP RCE LFI WordPress +1

NVD

CVSS 3.1

9.8

EPSS

29.2%

Threat

4.3

CVE-2022-0855 MEDIUM POC PATCH This Month

Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcs_plugin prior to 0.0.4. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Information Disclosure Whmcs

NVD GitHub

CVSS 3.1

6.1

EPSS

1.0%

CVE-2024-9193

EPSS 29% 4.3 CVSS 9.8

CRITICAL POC THREAT Emergency

Information Disclosure PHP RCE +3

NVD

CVE-2022-0855

EPSS 1% CVSS 6.1

MEDIUM POC PATCH This Month

Information Disclosure Whmcs

NVD GitHub