WP
Vendor
Wpwhitesecurity
16
CVEs
0
On KEV
0
New 30D
Products
WA8.8
WP Activity Log
Wpwhitesecurity
6 CVEs0 on KEV0 new
WA8.8
WP Activity Log Premium
wpwhitesecurity
5 CVEs0 on KEV0 new
W26.1
WP 2fa
Wpwhitesecurity
3 CVEs0 on KEV0 new
C48.8
Captcha 4wp
Wpwhitesecurity
1 CVEs0 on KEV0 new
WF9.8
Website File Changes Monitor
Wpwhitesecurity
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-2018 | WA WP Activity Log Premium wpwhitesecurity | 8.8 | Apr 9 | WP Activity Log Premium <= 4.6.4 - Authenticated (Subscriber+) SQL Injection |
| CVE-2023-6506 | W2 WP 2fa Wpwhitesecurity | 4.3 | Jan 11 | WP 2FA <= 2.5.0 - Insecure Direct Object Reference to Arbitrary Email Sending |
| CVE-2023-2261 | WA WP Activity Log Premium wpwhitesecurity | 4.3 | Jun 9 | WP Activity Log <= 4.5.0 - Missing Capabilities Check to User Enumeration |
| CVE-2023-2286 | WA WP Activity Log Premium wpwhitesecurity | 4.3 | Jun 9 | WP Activity Log <= 4.5.0 - Cross-Site Request Forgery via ajax_run_cleanup |
| CVE-2023-2284 | WA WP Activity Log Premium wpwhitesecurity | 4.3 | Jun 9 | WP Activity Log Premium <= 4.5.0 - Missing Authorization via ajax_switch_db |
| CVE-2023-2285 | WA WP Activity Log Premium wpwhitesecurity | 4.3 | Jun 9 | WP Activity Log Premium <= 4.5.0 - Cross-Site Request Forgery via ajax_switch_db |
| CVE-2020-36716 | WA WP Activity Log Wpwhitesecurity | 7.3 | Jun 7 | WP Activity Log <= 4.0.1 - Missing Authorization |
| CVE-2022-2891 | W2 WP 2fa Wpwhitesecurity | 5.9 | Oct 10 | WP 2FA < 2.3.0 - Time-Based Side-Channel Attack |
| CVE-2022-2269 | WF Website File Changes Monitor Wpwhitesecurity | 9.8 | Aug 8 | Website File Changes Monitor < 1.8.3 - Admin+ SQLi |
| CVE-2022-2184 | C4 Captcha 4wp Wpwhitesecurity | 8.8 | Aug 1 | CAPTCHA 4WP < 7.1.0 - Local File Inclusion via CSRF |
| CVE-2022-1527 | W2 WP 2fa Wpwhitesecurity | 6.1 | May 30 | WP 2FA < 2.2.1 - Reflected Cross-Site Scripting |