Vulnerabilities (CVE)

Filtered by vendor Wpvnteam Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-46623 1 Wpvnteam 1 Wp Extra 2024-01-04 N/A 8.8 HIGH
Improper Control of Generation of Code ('Code Injection') vulnerability in TienCOP WP EXtra.This issue affects WP EXtra: from n/a through 6.2.
CVE-2023-46212 1 Wpvnteam 1 Wp Extra 2023-12-22 N/A 8.8 HIGH
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra allows Accessing Functionality Not Properly Constrained by ACLs, Cross Site Request Forgery.This issue affects WP EXtra: from n/a through 6.2.
CVE-2023-47825 1 Wpvnteam 1 Wp Extra 2023-11-29 N/A 8.8 HIGH
Cross-Site Request Forgery (CSRF) vulnerability in TienCOP WP EXtra plugin <= 6.4 versions.