Threat database

2 threats

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.1	EPSS 0.2%	CVE-2025-23806Ultimate Subscribe · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2025-01-22CVE Database V5CVE-2025-23806 Cross-Site Request Forgery (CSRF) vulnerability in ThemeFarmer Ultimate Subscribe ultimate-subscribe allows Reflected XSS.This issue affects Ultimate Subscribe: from n/a through <= 1.3. EPSS 0.2%Vulnerability ThemeFarmer	CVE Database V5	2025-01-22
Medium	4.3	EPSS 0.3%	CVE-2024-1689WooCommerce Tools · Missing Authorization Medium4.3EPSS 0.3%2024-06-07CVE Database V5CVE-2024-1689 The WooCommerce Tools plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the woocommerce_tool_toggle_module() function in all versions up to, and including, 1.2.9. This makes it possible for authenticated attackers, with subscriber-level access and above, to deactivate arbitrary plugin modules. EPSS 0.3%Vulnerability themefarmer #cwe-862	CVE Database V5	2024-06-07

Showing 1–2 of 2 results