Threat database

64 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published
Medium	4.3	EPSS 0.5%	CVE-2024-1390Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction · Missing Authorization Medium4.3EPSS 0.5%2024-02-20CVE Database V5CVE-2024-1390 The Paid Membership Subscriptions – Effortless Memberships, Recurring Payments & Content Restriction plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the creating_pricing_table_page function in all versions up to, and including, 2.11.1. This makes it possible for authenticated attackers, with subscriber access or higher, to create pricing tables. EPSS 0.5%Vulnerability cozmoslabs #cwe-862	CVE Database V5	2024-02-20
High	8.8	EPSS 0.3%	CVE-2024-22140Profile Builder Pro · Cross-Site Request Forgery (CSRF) High8.8EPSS 0.3%2024-01-31CVE Database V5CVE-2024-22140 Cross-Site Request Forgery (CSRF) vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0. EPSS 0.3%Vulnerability Cozmoslabs #cwe-352	CVE Database V5	2024-01-31
Medium	6.5	EPSS 0.5%	CVE-2024-22141Profile Builder Pro · Exposure of Sensitive Information to an Unauthorized Actor Medium6.5EPSS 0.5%2024-01-24CVE Database V5CVE-2024-22141 Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Cozmoslabs Profile Builder Pro.This issue affects Profile Builder Pro: from n/a through 3.10.0. EPSS 0.5%Vulnerability Cozmoslabs #cwe-200	CVE Database V5	2024-01-24
High	7.1	EPSS 0.3%	CVE-2024-22142Profile Builder Pro · Cross-site Scripting High7.1EPSS 0.3%2024-01-12CVE Database V5CVE-2024-22142 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Cozmoslabs Profile Builder Pro allows Reflected XSS.This issue affects Profile Builder Pro: from n/a through 3.10.0. EPSS 0.3%Vulnerability Cozmoslabs #cwe-79	CVE Database V5	2024-01-12

Showing 61–64 of 64 results