PatchTheCVEwp-master vulnerabilities
Recent CVEs affecting wp-master products. 4 tracked.
wp-master has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2024-09-17. Highest priority: CVE-2024-4757 (score 44/100).
- CVE-2024-6230 MEDIUM 6.5 UPGRADE The پلاگین پرداخت دلخواه WordPress plugin through 2.9.8 does not have CSRF check in place when resetting its f
- CVE-2024-5170 MEDIUM 4.8 UPGRADE The Logo Manager For Enamad WordPress plugin through 0.7.1 does not sanitise and escape in its widgets setting
- CVE-2024-4757 HIGH 8.1 UPGRADE The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is mis
- CVE-2024-3993 MEDIUM 4.6 UPGRADE The AZAN Plugin WordPress plugin through 0.6 does not have CSRF check in some places, and is missing sanitisat
FAQ
How do I fix wp-master vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wp-master being exploited right now?
None of the tracked wp-master CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wp-master CVE should I patch first?
CVE-2024-4757 currently ranks highest (44/100): The Logo Manager For Enamad WordPress plugin through 0.7.0 does not have CSRF check in some places, and is mis.