pbmacintyre vulnerabilities and threats

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.7%	CVE-2025-7955RingCentral Communications Plugin – FREE · Improper Authentication Critical9.8EPSS 0.7%2025-08-28CVE Database V5CVE-2025-7955 The RingCentral Communications plugin for WordPress is vulnerable to Authentication Bypass due to improper validation within the ringcentral_admin_login_2fa_verify() function in versions 1.5 to 1.6.8. This makes it possible for unauthenticated attackers to log in as any user simply by supplying identical bogus codes. EPSS 0.7%Vulnerability pbmacintyre CWE-287	CVE Database V5	2025-08-28
High	7.1	EPSS 0.2%	CVE-2024-53770RingCentral Communications (WordPress plugin) · Cross-Site Request Forgery (CSRF) High7.1EPSS 0.2%2024-12-02CVE Database V5CVE-2024-53770 Cross-Site Request Forgery (CSRF) vulnerability in pbmacintyre RingCentral Communications rccp-free allows Stored XSS.This issue affects RingCentral Communications: from n/a through <= 1.7.0. EPSS 0.2%Vulnerability pbmacintyre	CVE Database V5	2024-12-02

Page 1 of 1