CVE Intelligence
Skip to main content
MEDIUM

CVE-2022-4974

CVE-2022-4974 — Freemius SDK <= 2.4.2 - Missing Authorization Checks

The Freemius SDK, as used by hundreds of WordPress plugin and theme developers, was vulnerable to Cross-Site Request Forgery and Information disclosure due to missing capability checks and nonce protection on the _get_debug_log, _get_db_option, and the _set_db_option functions in versions up to, and including 2.4.2. Any WordPress plugin or theme running a version of Freemius less than 2.4.3 is vulnerable.

Published Updated Sources: cvelistV5, Wordfence

Triage

Is it exploited, how likely is exploitation, what does it touch, and how severe do the scoring sources call it.

Exploitation

Unreported

no source claims exploitation

EPSS

0%

chance of exploitation in 30 days

Affects

dashlabsltd

620 products listed

CVSS base

6.3

MEDIUM

CISA SSVC assessment

Three decision points CISA publishes for the CVEs it assesses · SSVC 2.0.3. A stakeholder decision, not a severity score.

CISA

Exploitation

None

none · proof-of-concept · active

Automatable

No

can an attacker script all four kill-chain steps

Technical impact

Partial

partial · total control of the vulnerable component

Affected scope

The catalog records vendors and products as separate lists, not pairs, so which product belongs to which vendor is not something this page can say.

Vendors (379)

dashlabsltdnicheaddonsdotswpenginebouncingsprouttoddhalfpennypootlepresspowerfulwpkkikuchi1220josevegapmbaldhasslzenwiserstepswpdevpowersbenmoreassynttribalnerdsetkamikebelscromer12rafalosinskistevehentytheafricanbossusmanaliqureshithemelocationkrspbpluginsjanwylmajickpremmercejcodexdreamfoxhqthemevincoitdaigo75eedeesurbmalostboy7whiteshadowslidedeckmvvappswpeventpartnerssaadiqbalpassionatebrainsrichard bthemekraftwordpluswpt00lsprotectyouruploadssakurapixeldgwyermhmrajibdamian gorastevejburgeprasadkirpekarclickervoltproteusthemesbadhonrocksstreamweaselspaguppaulio21vohotvahmed17stellarwpethereumicoiorisethemeivan paulinwpchillinteractivegeomapsgalooverwpdevermelapressoceasmilukovekartikparmaralphabposervicelitonice13wpdivelivemeshnitin247boriscolombiermarcqueraltjohnc1979ultimateblocksprinceahmedblackandwhitedigitalwpeka clubequalizedigitaltherealwebdisruptblocksparenasirahmedmojofywpgfiremelliotvsdipcodeattestshabtiibenicbandidoannastaatprintyedisonaveggwiczwpmoosesamdanijwebsolco2okjwindakdevsplugins3605starpluginsskshaikatmatthias reuterflexithemeswgaugebdthemesaharonyanwoodyhaydaybfintalseezeewpkubewordpresschefvanyukovstarfishwphalmatpluginswaresmartwpresskenanfallonthemeythemesnpluginswpvibesdrosendounitecmswpjoligetsparrowzerozendesignmcurlydudoalexmosstranzlyalekvgowebsmartythemeseiwpmunichinputwpdiviframeworkgiladtakonianssilaitilawpbitsprelcdeothemesversacompmaartenbelmansstylingwebbenninjalibsroyalnavneetwebheadllcbilaltasfoopluginsedgegalleryplugingloriousthemesmikewire rocksoliddam6plirkanushamim51divisumoxplodedthemespopeatingmohsinofflinecleverpluginsxyulexmberdingdaniyalahmedkwphrmanagercoderpressoloyede jamiucommercepunditwp makingolezhyk5javmahclosemarketingwpcohorttobias conradcodesavorywebba agencysalttechnosamuelsilvaptthemeisleseancarricomuhammad rehmandanish alildninjasactuaryzaskinfornwebjburleigh1penguininitiativesessekiawpwebinfotechjanthielemannwpconedevlinekalekanathcmbibbyggriesserdejanmarkovicintoxstudiosonalsinha21frenifyvinod dalvikaizencoderscloudlivingmte90bavokoservicesfoxmoontakanakuibestpluginswordpresstauhidproankitmaruthemestyfullworkskhothemesbeeneebdjenhkartechifyblockmeistermantrabraintickerafrostbournavidthemescodeiespatrickgarmanskymindsmunirkamallukeseagermaurolopesmihail barinovsjavedjamesparkninjawpmagicsmaxsdesignwptbdotrexsslatlasgallerycreatormaltathemeswebmuehlesvovafrebelcodetropicalistatonyzeoligreenjaymediahiddenpearlswptravelenginesebetsyntacticstheeventscalendaranfrageformularlimbcodepeterschulznlcypressnorthuriahs victormeowcrewchetmacsindyakinsergeihumblethemesoceanwpproperfractionglowlogixaguilerasoftrenaudbodivanchernyakovwproyalmodulemasterslkoudalxjohnykmeepluginsandyabelowcadudecastroalvescyberhoboshawoninfomnelson4wpdeliciousimtiazrayhanspartacsmgteamthinleek9brada6closetechnologyinfosatechinvisnetultradevsbuttonizerbrightvesseldevkairadanieliserbrandonfireejslondoniksstudiomdedevanasbinmukimivacykylegilmanelbisneroh3technologiessj omatstarssangarankoen12344woopopsscrollsequencethecodechimemasterblocksmoomooagencykitthemestripettomumarym1985wpgeniuzchillichallicloudspongewuposhelob9fsruslanboltonstudiosjkohlbachweconnectcodezeethememohammedrezqatakanozdovypgkherjaydeep nimavatmbrown24creativethemeshqdarellmarviorochakaggdesignjetixwpwplegalpagesmilmorbycrikcodexonicsvernaljurskisnazzythemeslynn999dangub86mattpramschuferalex yecliffpaulickcebbiinterfacelabrafacarvalhidodavidandersonronena100blockypagemaciejbak85sorsawolistpluswalkerwppatrickposnerggedderankbearstaxwpfastafw3scloudelementinvaderalleythemespippozanardodvizheniapluginandplaymulticollabwpsaadsovstackdanielealessandrawpscriptsthijziepagebuildersandwichswitcorppasyukupfivwpsoul

Products (620)

yasr yet another star rating plugin for wordpressevents addon for elementorfraud prevention for woocommerce and eddgutenberg blocks acf blocks suiteultimeterpast events extensionpootle pagebuilder wordpress page builderlocal delivery drivers for woocommerceultimate gutenberg custom block templateswp required taxonomies categories and tags mandatoryfeatured products first for woocommerce a extension of woocommerce woocommerce addon pluginssl zen ssl certificate installer https redirectsstreak crm for gmail for contact form 7 wordpress pluginwordpress dev powers acf color coded field types plugindancepress trwaproduct size charts plugin for woocommercewp my admin bara no code page builder for beautiful performance based contentlocalseomapeasy prayeradfoxly ad manager adsense ads ads txtwp get personalcheckout with cash app on eddserver infocustom woocommerce checkout fields editorkrsp frontend file uploaderpanorama 360 virtual tour panoramic image viewer and morebulk attachment downloadautosave netpremmerce wholesale pricing for woocommerceany popup popup forms optins adscheckout with venmo on eddpayment gateway per product for woocommercehqtheme extravit website reviewseu vat assistant for woocommercewordpress slider block gutensliderhucommerce magyar kieg sz t sek woocommerce web ruh zakhozkvoucheryt player embed and customize video playerserror log monitorslidedeck responsive wordpress slider pluginpremmerce multi currency for woocommercebooking addon for woocommercewp event partners wordpress plugin for event and conference managementwc shop sync square payment gateway and product synchronization for woocommerceaeh speed optimization browser cache optimized minify lazy loading image optimizationforcefieldfit featured image toolkitall in one invite codesdynamic pricing and discount rules for woocommercebetter messages live chat chat rooms real time messaging private messagesgrid styler for contact form 7 and diviprotect uploads with login protect your uploadsatlas knowledge basesimple sitemap create a responsive html sitemapsuper video player fully customizable video player with playlistwp books gallery build stunning book showcases libraries in minutesfibosearch ajax search for woocommercetag groups is the advanced way to display your taxonomy termswp free sslclickervolt affiliate links click tracking for performance marketersconsultpress litestyler mate for contact form 7streamweasels twitch integrationmobilook mobile view mobile friendly testzip code redirectguestofy restaurant reservations plugin room planer reservation formcf7 constant contact fields mappingbookit booking appointment calendarethereumicort easy builder advanced addons for elementorwp contact slider contact form slider widgetcountry based payments for woocommercefilr secure document libraryelastamapgeo interactive geo mapswordpress animation plugin animated everythingwp notification bellactivity log for mainwpconnected sermonsbulk edit and create user profiles wp sheet editormoneybulk woocommerce category creatoreasy math captcha for cf7master accordion former wp awesome faq pluginbetter addons for elementorlivemesh addons by elementorplace order without payment for woocommercestewoo super transactional emails for woocommercedemomentsomtres addressout of stock display for woocommerceultimate blocks 25 gutenberg blocks for block editorbulk auto image title attribute image title tag optimizer image seowp radio worldwide online radio stations directory for wordpressbookpress for book authorsqyrr simply and modern qr code creationwordpress directory plugin for business listings wp local plusequalize digital accessibility checker wcag ada eaa and section 508 compliancefunnelmentalsblockspare news magazine and blog addons for gutenberg block editorforms to zapier integromat ifttt workato automate io elastic io built io apiant webhookproduct carousel for woocommerce woorousellbetter robots txt ai ready crawl control bot governancegfirem fieldscoupon affiliates affiliate plugin for woocommercewp post blocklms plugin elearning online courses by attestfrontend admin by dynamiappssimple giveaways grow your business email lists and traffic with contestsmasonry gallery posts for divi wp toolsgfirem action afterukrposhtaannasta filters for woocommercewp lead streamthe events calendarfocus on reviews for woocommerceemail trackerblock styler for gravity formswp page templatesproduct customer list for woocommercewp mooseteam members a wordpress team plugin with gallery grid carousel slider table list and morefloating social share icons and social share buttons next previous post links flsouth pole climate action nowlittlebot invoicesgenealogical tree family tree ancestry for wordpressautomatic youtube gallerythank you page for woocommercemarijuana age verifywoocommerce upcoming productsfrontend admin add and edit posts pages users and more all from the frontendsv tracking managerwp easy pay payment and donation form builder for squarewordpress seo checklistwgauge free versionprime slider addons for elementorpost form registration form profile form for user profiles frontend content forms for user submissions ugcwp tools divi product carouselguest posting frontend posting front editor wp front user submitsocial gallery litestackable page builder gutenberg blocksfive star ratings shortcodecaptcha 4wp antispam captcha solution for wordpresspremmerce wishlist for woocommercesalon booking system free versionsurbma gdpr proof cookie consent notice baradvanced menu manager pro built for content heavy wordpress sites to add filter lock and edit menus easilylive tv player worldwide live tv channels player for wordpressmarket exporterwp adminify white label wordpress admin menu editor login customizertk google fonts gdpr compliantstarfish review generation marketing for wordpresswp emailyeducation addon for elementorsv proven expertsurveyfunnel survey plugin for wordpressadvanced classifieds directory promusic player for elementor audio player podcast playercryptocurrency product for woocommercewoocommerce next order couponoverlay image divi moduleemail header footerdocument viewer embed word excel powerpoint pdfs instantlyprice bands for woocommerceaddon elements for elementor formerly elementor addon elementssmart variations images swatches for woocommercefeatured images in rss for mailchimp moresimple sponsorshipsunlimited elements for elementorjoli table of contentssparrow product reviews and ratings for woocommercemulti page auto advance for gravity formsgenerate images ai magic post thumbnaillive scores for sportspresshide shipping method for woocommerceultimate carousel for diviwp meta and date removerimage carousel for divicomments not replied tocontact form 7 capsule crm integrationopenseawordpress translation plugin for post pages woocommerce products tranzly io ai deepl automatic wordpress translatorpixel manager for woocommerce conversion tracking google ads ga4 tiktok dynamic remarketingmodern addons for elementor page builderviralikewordpress dev powers element selector jquery powers pluginwp munich blocks gutenberg blocks for wordpressavailability datepicker booking calendar for contact form 7 input wpfooter plugin for diviaidwp donation payment forms stripe powerednew user approvegfirem advance searchwpmailer the best mail builder no more core for your emails support elementor cf7 forms etcshared files frontend file upload form secure file sharingwpbits addons for elementor page builderspeculorwp google street view with 360 virtual tour google maps local seowordpress everse starter sites elementor templatesmaster addons for elementor widgets extensions theme builder popup builder template kitschoice payment gateway for woocommercedomain mapping system create microsites with multiple alias domains multisite optionalorder and inventory manager for woocommerceninja libs amazon seswp comment cleaner delete all comments disable comments bulk delete remove commentswp cron status checkercodekit custom codes editorgallery by foogallerychange price title for woocommercewordpress gallery plugin edge photo galleryglorious services supporteasy newsletter signupsannouncement notification banner bulletinadvanced database replacermultisite robots txt managersimple social page widget shortcodeproduct country restrictions for woocommerce country catalogsfront end pmultimate divi modules suite divi sumo litext points rewards for woocommercewidgets for woocommerce products on elementordelivery for woocommercenotifsms sms notifications otp 2fa for wordpress woocommercesecurity ninja wordpress security firewalltinymce annotatejustified gallerybook buyback pricesfuse social floating sidebarwp hr manager the human resources plugin for wordpressemails blacklist for everest formsall in one video gallerywoo admin product notesremove add to cart woocommercecheckout with zelle on woocommercedivi gravity forms wp toolseverserun time image resizingrest routes custom endpoints for wordpress rest apiwidget for contact form 7add pinterest conversion tags for pinterest ads site verificationwpgsi spreadsheet integrationwp bugbotfile manager for google drive integrate google drivenokkecustomers table for woocommerce view search bulk editorsync ecommerce neopreloader for diviget better reviews for woocommerceknowledge base documentation wiki plugin basepress docseasy appointment booking scheduling system webba booking calendarshubanacf for woocommerce productscheduled notification bar3d viewer display interactive 3d modelsfullscreen menugallery photoblocksredirection for contact form 7demomentsomtres grid archiveinbound brewwp photo effectswpoptin ai powered top bars popups lead generationextra fees for woocommercereset course progress for learndashpodcast box best podcasting plugin for wordpressthe best plugin for restrict content support all custom post types and elementor password protectedturbo widgetspassster password protect pages and contentgift message for woocommerceazw woocommerce file uploadsblog designer pack blog post grid post slider post carousel category post newsbroadcast litenotification bar announcement and cookie notice wordpress plugin foobarwp author biorw divi unite gallerytablesome table contact form db wpforms cf7 gravity forminator fluentproduct image watermark for wooafi the easiest integration pluginrevolution for elementorconeblog elementor blog widgetsunder constructionwp gratifyautomizy gravity formswidgets on pagesget feedback from visitors wp feedback suite pluginwordpress buffer hypesocial social media auto post social media auto publish and schedulecontent aware sidebars fastest widget area pluginbanifast wordpressskt templates 100 free templates for elementor gutenbergcategorify wordpress media library category file managerivory search wordpress search pluginadd twitter pixel for twitter adsxt variation swatches for woocommerceurl shortify simple and easy url shortenerpledged plugins secure gateway for authorize net and woocommercebuddypress woocommerce my account integration create woocommerce member pagesaffiliate link builder plugin for amazon associates review engineglossarybavoko seo tools all in one wordpress seocartoon urlwp frontend admin display wp admin pages in the frontendblock suspend report for buddypressmenu image icons made easyxt ajax add to cart for woocommerceone click loginether and erc20 tokens woocommerce payment gatewaychat button leads and order over chatshipping gateway per product for woocommercepurosanichetable responsive comparison table blockadvanced page visit counter most wanted analytics plugin for wordpresswp sierradigital goods checkout field editor for woocommerce checkoutseo boosterstop contact form 7 spam wpforms spam free protectionultimate widgets lightinsert or embed articulate content into wordpressappexperts mobile app builder for wordpress woocommerce to ios and android appsultimate post kit addons for elementorcaxton create pro page layouts in gutenbergnitek carousel slider cool transitionsextend filter products by price widgetblockmeister block pattern builderyatri toolsrestrict membership site content and user access restrictions for wordpresschange prices with time for woocommerceflat rate shipping method for woocommerceresponsive social slider widgetmenu item schedulerblog sidebar widgetmultipurpose gutenberg blockfull page blog designerwoocommerce variation swatches for productswp activity logsimple feature requests free user feedback boardbulk edit categories and tags create thousands quickly on the editorlicense manager for woocommercesky login redirectga4wp analytics dashboard for the websitedivi collagepersistent logindeals of the day woocommerceadd linkedin insight tags for linkedin adseasy settings for learndashshare this imageeasy social feed social photos gallery and post feed for wordpressnexusmeridiawebinarignition live automated evergreen webinars for woocommercedelete posts automaticallybrandwpbakery page builder addons by livemeshwp table builder drag drop table builderradio player live shoutcast icecast and any audio stream playerdivi content restrictorlogo showcase responsive logo carousel logo slider logo gridpremmerce variation swatches for woocommercepowerfolio portfolio image gallery for elementorssl atlas free ssl certificate https redirect for wordpressmixed media gallery blockseasy tiktok feed tiktok video feed gallery pluginpopoverxyz show light weight beautiful tool tips on any textbulk auto image alt text alt tag alt attribute optimizer image seonumber chatrating widget star review systemspotlight social feeds block shortcode and widgetexpire tagsgo viral social share social sharebar social locker social chat open graph reactions share view counterswow styler for cf7 visual styler for contact form 7 formsdashy google analytics advanced dashboardpremmerce user rolesradio station by netmix manage and play your show schedule in wordpresspoints management system for gamification ranks badges and loyalty rewards program mycredseo audit wp site auditorwordpress reviews by reviewpresswp travel engine tour booking plugin tour operator softwarewp mobile menu the mobile friendly responsive menuwp smart export freeeasync booking hotels restaurants car rentalswp conference schedulestrumenti partita iva per woocommerceanfrageformular multi step drag drop formular builder leadgenerierungpremmerce brands for woocommerceethereum walletlimb gallery create beautiful image video galleriescode managerpayment gateway for payfabriccp simple newsletterlittlebot ach for stripe plaidaquarella litecoinbase commerce crypto gateway for woocommercevillarkikote location picker at checkout google address autofill plugin for woocommerceage verification screen for woocommerceenhanced ecommerce google analytics for woocommercejoli faq seo wordpress faq pluginmass pages posts creatorwp relevant adsgloriousthemes starter siteswp group promoterairpressschema plugin for divi gutenberg shortcodesgiveaways for woocommercecustom login page customizerlearnmoredemomentsomtres media tools autoocean extrakk star ratings rate post collect user feedbacksdrop shadow boxesfaq manager for divi gutenberg block shortcodeads txt app ads txt manager for wordpressquick contact formwp frontend profilesvg flags beautiful scalable flags for all countriesdrip feed content extended for learndashpost list designer category post recent post post listconversion de moneda woocommercevidseo video transcript embedding for wordpress llmbefore and after product images for woocommercewoocommerce customer reviews with artificial intelligence analyzis with ibm watson tone analyzerlawpress law firm website managementshipping method display style for woocommerceroyal addons for elementor addons and templates kit for elementorsql reporting services ssrs plugin for wordpressbulk edit posts and products in spreadsheetdelete duplicate postsws bootstrapclean social iconsmedia library file downloadwp link bioautomatic internal links for seo by pagupgeo mashupbuilder for woocommerce product reviews shortcodes reviewshortcontact list online staff directory address bookpost snippets custom wordpress code snippets customizersocialmark easy watermark logo on social media post link share previewprint my blog print pdf ebook converter wordpress pluginwp delicious recipe plugin for food bloggers formerly delicious recipestreepress easy family trees ancestor profilespostcode redirectproduct author for woocommercewp coupons and deals coupon plugin for affiliate marketersfeedpress generator external rss frontend customizerform vibes database manager for formswp automedicbanner management product slider product carousel for woocommerceduplicate variations for woocommercesend prebuilt emailshelpie faq accordion docs knowledge baselivemesh siteorigin widgetslivemesh addons for beaver buildertabs with recommended posts widgetconnect woocommerce shop to erp crm verifactu and eu vat compliancerevivepress keep your old content evergreenwp fail2ban advanced securityultra elementor addonsrecurwp wordpress recurly payment gatewaybuttonizer floating menus sticky buttons popup builderquick event managerimage photo gallery final tiles gridlightbox modal popup wordpress plugin fooboxwp dev powers display screen dimensions to admin pluginultimate bulk seo noindex nofollow speed up penalty recovery ultimate seo boosterwp data access app builder for tables forms charts maps dashboardsstorecustomizer a plugin to customize all woocommerce pagestopnewswp display tikcer news rss feed widget and many moreuser menus nav menu visibilitycontact form 7 multi step formseasy age verifyblocked in china check if your site is available in the chinese mainlanddisable payment methods based on cart conditions for woocommerceawesome ssliks menu wordpress category accordion menu faqspurushooked editable contentrun contests raffles and giveaways with contestswppost carousel divimailchimp managerpremmerce permalink manager for woocommercesecure ip loginsvideopackpremmerce woocommerce customers managerdynific addons for elementor formerly anywhere elementordivi torque lite divi theme divi builder extra themeevents calendar registrationrocket maintenance mode coming soon pagewordpress woocommerce sync for google sheeteasy smooth scroll links smooth scrolling anchorpage builder gutenberg blocks kioken blockscryptocurrency portfolio trackergo fetch jobs for wp job managerquick affiliate storewp tools divi blog carouselpost to google my business google business profilenichebasewpvisitorinfo show visitor information conditional data based on that informationpremmercecartpops high converting add to cart popup for woocommercescrollsequence cinematic scroll image animation pluginelationcuisine palaceproduct attachment for woocommercemaster blocks gutenberg site builderproduct options and price calculation formulas for woocommerce uni cpowordpress coupon plugin for bloggers and marketers wp offerswordpress form builder plugin for contact forms surveys and quizzes tripettowidgets on pages and postsbetter messages wcfm integrationsheetpress manage wordpress meta data with google sheetsadvanced custom fields options import exportquick paypal paymentstarot card oraclebetter sharingrestrict user access ultimate membership content protectionwupo group attributes for woocommercenugget by ingot easy automated and native a b testing for everyonefeedbackscout the easiest way to collect prioritise manage and track customer feedbackarendelleeasy zillow reviewsbattle suit for divistore toolkit woocommerce extensions quick enhancements handy toolswcc seo keyword researchelements for lifterlmscustom registration and custom login forms with new recaptchab2b request a quotewadi surveyperformance kitpage builder for gutenberg starterblocksimpexium single sign onxt quick view for woocommercelive drag and drop builder for contact form 7primary addon for elementorjds portfoliotwentyfourth wp scraperblocksy companionwordpress google translatehasiumstation pro advanced audio streaming player for wordpressevent tickets and registrationgateway for paylate on woocommerceauto seo meta keywords meta tags keywords optimization woocommerceclimateclick climate action for allpremmerce seo for woocommercewholesale for woocommercefrontend group restriction for learndashreally simple featured video featured video support for posts pages woocommerce productsdisplay eventbrite eventsxt floating cart for woocommercecookie banner for gdpr ccpa wplp cookie consentwp spid italiatiered pricing table for woocommerceprime mover migrate wordpress website backupsreplyable subscribe to comments and reply by emailcourt reservation manage your court bookings onlinevo store locator wp store locator pluginget directions mappremmerce redirect managersnazzyadmin wp admin themeamelawoocommerce customers order historyethpress web3 loginant admin notices for teambulk edit coupons for woocommerce wp sheet editorpay for post with woocommercebbresolutionsawca the great analytics insights for your estoretk smugmug slideshow shortcodelightbox everlightbox galleryunakitwp affiliate disclosuremedia cloud for bunny cdn amazon s3 cloudflare r2 google cloud storage digitalocean and moreracar clear cart for woocommercewp disable sitemapinternal link juicer seo auto linker for wordpressblock slider responsive image slider video slider post sliderpinblocks gutenberg blocks with pinterest widgetscontact widgets for elementor all the contact links you need in one placetickera sell tickets manage eventsstreamcast live radio streaming playersticky add to cart for wooblockypage gutenberg based page builderpro broken links maintainerwp school calendarlistplus unlimited listing directorywalker coreagy age verification for woocommercemodern designs for gravity formsrankbearstax header builderfast checkout for woocommercewoocommerce payplugeasy code snippetsw3scloud contact form 7 to zoho crmwidget detector for elementoradd tiktok pixel for tiktok ads woocommercewp encryption one click free ssl certificate ssl https redirect security ssl scanbetter messages integration for wc vendors marketplacealley business toolkitpremmerce product filter for woocommercewp search filtereasy post views countpower ups for elementorsocial kitpost slider and post carousel with post vertical scrolling widget a responsive post sliderhm multiple rolesteam collaboration content workflow plugin for wordpress editorial teams multicollabimage alt text manager bulk dynamic alt tags for image seo optimization aipremmerce product search for woocommercesecurity safebulk edit products for woocommerce wp sheet editorda reactionsfood store online food delivery pickupabeta link punchoutjav s woocommerce and trello integration wootrellopage builder sandwich front end wordpress page builder pluginwp sessions time monitoring full automaticwoowgallerywordpress auto seo plugin upfiv seo wizardgreenshift animation and page builder blocksrestaurant cafe addon for elementor

Every base score collected

Sources score independently and disagree; each row says who scored it and under which version.

ScoreVersionSeverityExpl.ImpactSource
6.3CVSS 3.1MEDIUM——cvelistV5

Weakness & attack patterns

  • CWE-862

Attack patterns reported against this CVE. The ATT&CK techniques below are inferred from its weakness class.

  • T1211Exploitation for Defensive Evasion
  • T1542.002Pre-OS Boot: Component Firmware
  • T1556Modify Authentication Process

References

6 on the record

Elsewhere on this site

Not in any source we poll

Listed rather than left blank: an empty field and an unmeasured one look identical on screen, and only one is a reason to look elsewhere.

  • No confirmed IOCs, IP addresses, domains, file hashes, or malware artifacts supplied.
  • No organization-specific asset inventory, compensating-control status, or patch deployment evidence supplied.
  • No exploit packet captures, log samples, or incident case IDs supplied.