Ram

20172018201920202021202220232024

Critical

High

Medium

Low

Global Rank

#49

of 3,248 researchers

Vulns

156

Critical10

High50

Medium96

Low0

Affected Assets

90

85plugins4themes1core

Avg CVSS

6.5

Average score of vulnerabilities

Researcher Submissions

156 records


2024-09-13 00:00	Bricks <= 1.10.1 - Authenticated (Bricks Page Builder Access+) Stored Cross-Site Scripting Bricks <= 1.10.1	`CVE-2023-3410`	5.4 Medium	Ram	Yes
2024-09-09 00:00	Tutor LMS <= 2.7.4 - Cross-Site Request Forgery via 'addon_enable_disable' Tutor LMS <= 2.7.4	`CVE-2023-2919`	4.3 Medium	Ram	Yes
2024-08-23 00:00	Custom Permalinks <= 2.6.0 - Authenticated(Editor+) Stored Cross-Site Scripting Custom Permalinks <= 2.6.0	`CVE-2023-0926`	4.4 Medium	Ram	Yes
2024-08-16 00:00	Bricks <= 1.8.1 - Cross-Site Request Forgery via save_settings Bricks <= 1.8.1	`CVE-2023-3408`	4.3 Medium	Ram	Yes
2024-08-16 00:00	Metform Elementor Contact Form Builder <= 3.2.4 - Unauthenticated Double-Extension Arbitrary File Upload MetForm <= 3.2.4	`CVE-2023-0714`	8.1 High	Ram	Yes
2024-08-16 00:00	Bricks <= 1.8.1 - Cross-Site Request Forgery via reset_settings Bricks <= 1.8.1	`CVE-2023-3409`	5.4 Medium	Ram	Yes
2023-12-27 00:00	Build App Online <= 1.0.22 - Account Takeover via Weak Password Reset Mechanism Build App Online <= 1.0.22	`CVE-2023-7264`	8.1 High	Ram	Yes
2023-08-30 00:00	Metform Elementor Contact Form Builder <= 3.3.1 - Authenticated (Subscriber+) Information Disclosure via 'mf_first_name' shortcode MetForm <= 3.3.1	`CVE-2023-0689`	4.3 Medium	Ram	Yes
2023-08-08 00:00	FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Improper Authorization to Arbitrary Plugin Installation FULL <= 2.2.3	`CVE-2023-4243`	8.8 High	Ram	Yes
2023-08-08 00:00	FULL - Customer <= 2.2.3 - Authenticated(Subscriber+) Information Disclosure via Health Check FULL <= 2.2.3	`CVE-2023-4242`	4.3 Medium	Ram	Yes

Showing 1–10 of 156 reports

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C