PatchTheCVEwpvibes vulnerabilities
Recent CVEs affecting wpvibes products. 9 tracked.
wpvibes has 9 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 9. Most recent: 2024-09-05. Highest priority: CVE-2023-5674 (score 60/100).
- CVE-2024-5325 HIGH 8.8 UPGRADE The Form Vibes plugin for WordPress is vulnerable to SQL Injection via the ‘fv_export_data’ parameter in all v
- CVE-2024-5309 MEDIUM 5.4 UPGRADE The Form Vibes – Database Manager for Forms plugin for WordPress is vulnerable to unauthorized access of data
- CVE-2023-5674 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i
- CVE-2023-5673 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file extensions uploading files to at
- CVE-2023-5672 MEDIUM 6.5 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly validate file path parameters when attaching f
- CVE-2023-5645 HIGH 8.8 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i
- CVE-2023-5644 HIGH 7.6 UPGRADE The WP Mail Log WordPress plugin before 1.1.3 does not correctly authorize its REST API endpoints, allowing us
- CVE-2023-51410 CRITICAL 9.9 UPGRADE Unrestricted Upload of File with Dangerous Type vulnerability in WPVibes WP Mail Log.This issue affects WP Mai
- CVE-2023-47530 HIGH 7.6 UPGRADE Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WPVibes
FAQ
How do I fix wpvibes vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is wpvibes being exploited right now?
None of the tracked wpvibes CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which wpvibes CVE should I patch first?
CVE-2023-5674 currently ranks highest (60/100): The WP Mail Log WordPress plugin before 1.1.3 does not properly sanitise and escape a parameter before using i.