WP Extra
Wpvnteam · 5 CVEs
CVE-2023-46623
CRITICAL
WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE)
Dec 29, 2023
CVE-2023-46212
HIGH
WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control
Dec 18, 2023
CVE-2023-47825
HIGH
WordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF)
Nov 22, 2023
CVE-2023-5314
MEDIUM
WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending
Nov 22, 2023
CVE-2023-5311
HIGH
WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification
Oct 25, 2023
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2023-46623 | WordPress WP EXtra Plugin <= 6.2 is vulnerable to Remote Code Execution (RCE) | CRITICAL | 0.58% | Dec 29, 2023 |
| CVE-2023-46212 | WordPress WP EXtra Plugin <= 6.2 is vulnerable to Broken Access Control | HIGH | 0.21% | Dec 18, 2023 |
| CVE-2023-47825 | WordPress WP EXtra Plugin <= 6.4 is vulnerable to Cross Site Request Forgery (CSRF) | HIGH | 0.26% | Nov 22, 2023 |
| CVE-2023-5314 | WP EXtra <= 6.2 - Missing Authorization to Arbitrary Email Sending | MEDIUM | 0.39% | Nov 22, 2023 |
| CVE-2023-5311 | WP EXtra <= 6.2 - Missing Authorization to .htaccess File Modification | HIGH | 1.44% | Oct 25, 2023 |
Showing 1 to 5 of 5 CVEs