WP Remote Users Sync vulnerabilities | LiveThreat CVE Feed

Product

WP Remote Users Sync

by Froger · last CVE Aug 16, 2023

CVEs

On KEV

5.4

Max CVSS

New 30D

Severity mix

Critical 0High 0Medium 2Low 0

Severity

Exploitation

Watch

Add WP Remote Users Sync to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-3958	5.4	1%	Aug 16	WP Remote Users Sync <= 1.2.12 - Authenticated (Subscriber+) Server Side Request Forgery Affected: before 1.2.13
CVE-2023-4374	4.3	1%	Aug 16	WP Remote Users Sync <= 1.2.11 - Missing Authorization to Authenticated (Subscriber+) Log View Affected: before 1.2.12