Wip Custom Login

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-42884 MEDIUM This Month

Missing Authorization vulnerability in ThemeinProgress WIP Custom Login.2.7. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Authentication Bypass Wip Custom Login

NVD

CVSS 3.1

5.4

EPSS

0.1%

CVE-2023-33313 HIGH This Week

Cross-Site Request Forgery (CSRF) vulnerability in ThemeinProgress WIP Custom Login plugin <= 1.2.9 versions. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CSRF Wip Custom Login

NVD

CVSS 3.1

8.8

EPSS

0.3%

CVE-2022-42884

EPSS 0% CVSS 5.4

MEDIUM This Month

Authentication Bypass Wip Custom Login

NVD

CVE-2023-33313

EPSS 0% CVSS 8.8

HIGH This Week

CSRF Wip Custom Login

NVD