CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.7%
_ Did you know Wordfence runs a Bug Bounty Program for all WordPress plugin and themes at no cost to vendors?__Researchers can earn up to $10,400, for all in-scope vulnerabilities submitted to our Bug Bounty Program! Find a vulnerability, submit the details directly to us, and we handle all the rest. _
Last week, there were 71 vulnerabilities disclosed in 54 WordPress Plugins and 2 WordPress Themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 29 Vulnerability Researchers that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected.
Our mission with Wordfence Intelligence is to make valuable vulnerability information easily accessible to everyone, like the WordPress community, so individuals and organizations alike can utilize that data to make the internet more secure. That is why the Wordfence Intelligence user interface, vulnerability API, webhook integration, and Wordfence CLI Vulnerability Scanner are all completely free to access and utilize both personally and commercially, and why we are running this weekly vulnerability report.
Enterprises, Hosting Providers, and even Individuals can use the Wordfence CLI Vulnerability Scanner to run regular vulnerability scans across the sites they protect. Or alternatively, utilize the vulnerability Database API to receive a complete dump of our database of over 17,000 vulnerabilities and then utilize the webhook integration to stay on top of the newest vulnerabilities added in real-time, as well as any updates made to the database, all for free.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The Wordfence Threat Intelligence Team reviews each vulnerability to determine impact and severity, along with assessing the likelihood of exploitation, to verify that the Wordfence Firewall provides sufficient protection.
The team rolled out enhanced protection via firewall rules for the following vulnerabilities in real-time to our Premium, Care, and Response customers last week:
Wordfence Premium, Care, and Response customers received this protection immediately, while users still running the free version of Wordfence will receive this enhanced protection after a 30 day delay.
Patch Status | Number of Vulnerabilities |
---|---|
Patched | 47 |
Unpatched | 24 |
Severity Rating | Number of Vulnerabilities |
---|---|
Medium Severity | 50 |
High Severity | 15 |
Critical Severity | 6 |
Vulnerability Type by CWE | Number of Vulnerabilities |
---|---|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 21 |
Missing Authorization | 14 |
Information Exposure | 11 |
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') | 6 |
Cross-Site Request Forgery (CSRF) | 5 |
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') | 4 |
Unrestricted Upload of File with Dangerous Type | 3 |
Deserialization of Untrusted Data | 2 |
Incorrect Privilege Assignment | 2 |
Authentication Bypass Using an Alternate Path or Channel | 1 |
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 |
Server-Side Request Forgery (SSRF) | 1 |
Researcher Name | Number of Vulnerabilities |
---|
| 11
| 10
| 9
| 5
| 4
| 3
| 3
| 2
| 2
| 2
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
| 1
Are you a security researcher who would like to be featured in our weekly vulnerability report? You can responsibly disclose your WordPress vulnerability discoveries to us and earn a bounty on in-scope vulnerabilities through our Bug Bounty Program. Responsibly disclosing your vulnerability discoveries to us will also get your name added on the Wordfence Intelligence leaderboard along with being mentioned in our weekly vulnerability report.
Software Name | Software Slug |
---|---|
Add Admin CSS | add-admin-css |
Add Admin JavaScript | add-admin-javascript |
Admin Post Navigation | admin-post-navigation |
Admin Trim Interface | admin-trim-interface |
AI Engine | ai-engine |
All-in-One Video Gallery | all-in-one-video-gallery |
AMP for WP β Accelerated Mobile Pages | accelerated-mobile-pages |
Aramex Shipping WooCommerce | aramex-shipping-woocommerce |
aThemes Starter Sites | athemes-starter-sites |
Campaign Monitor for WordPress | forms-for-campaign-monitor |
CM WordPress Search And Replace Plugin | cm-on-demand-search-and-replace |
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder | fluentform |
Custom Query Blocks | post-type-archive-mapping |
Flipbox Builder | flipbox-builder |
Funnel Builder for WordPress by FunnelKit β Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells | funnel-builder |
Generate Images β Magic Post Thumbnail | magic-post-thumbnail |
Great Restaurant Menu WP | best-restaurant-menu-by-pricelisto |
Grow by Tradedoubler β Advertiser Plugin for WooCommerce | tradedoubler-affiliate-tracker |
Happy Addons for Elementor | happy-elementor-addons |
Icegram Engage β Ultimate WP Popup Builder, Lead Generation, Optins, and CTA | icegram |
IgnitionDeck Crowdfunding Platform | ignitiondeck |
Image SEO β AI-Driven Image SEO Optimizer | imageseo |
Intelligence | intelligence |
Language Translate Widget for WP β ConveyThis | conveythis-translate |
LearnPress β WordPress LMS Plugin | learnpress |
ListingPro Plugin | listingpro-plugin |
LiteSpeed Cache | litespeed-cache |
Master Currency WP | mastercurrency-wp |
MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles | maxi-blocks |
Media.net Ads Manager | media-net-ads-manager |
News Element Elementor Blog Magazine | news-element |
Ninja Forms β The Contact Form Builder That Grows With You | ninja-forms |
One Click Close Comments | one-click-close-comments |
ParityPress β Parity Pricing with Discount Rules | paritypress |
Photo Gallery, Images, Slider in Rbs Image Gallery | robo-gallery |
Photo Gallery, Sliders, Proofing and Themes β NextGEN Gallery | nextgen-gallery |
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery β Upload, Vote, Sell via PayPal, Social Share Buttons | contest-gallery |
Piotnet Addons For Elementor | piotnet-addons-for-elementor |
PowerPack for Beaver Builder | bbpowerpack |
PowerPack Pro for Elementor | powerpack-elements |
Pretty Simple Popup Builder | pretty-simple-popup-builder |
Redux Framework | redux-framework |
Royal Elementor Addons and Templates | royal-elementor-addons |
Social Auto Poster | social-auto-poster |
Timetable and Event Schedule by MotoPress | mp-timetable |
Tutor LMS β Migration Tool | tutor-lms-migration-tool |
Ultimate WordPress Auction Plugin | ultimate-auction |
WooCommerce - PDF Vouchers | woocommerce-pdf-vouchers |
WooCommerce Product Table Lite | wc-product-table-lite |
WP Booking Calendar | booking |
WP EasyPay β Square for WordPress | wp-easy-pay |
Wp EMember | wp-emember |
WP Meteor Website Speed Optimization Addon | wp-meteor |
Youzify β BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress | youzify |
Software Name | Software Slug |
---|---|
Himalayas | himalayas |
ListingPro - WordPress Directory & Listing Theme | listingpro |
Please note that if you run the Wordfence plugin on your WordPress site, with the scanner enabled, you shouldβve already been notified if your site was affected by any of these vulnerabilities. If you'd like to receive real-time notifications whenever a vulnerability is added to the Wordfence Intelligence Vulnerability Database, check out our Slack and HTTP Webhook Integration, which is completely free to utilize.
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-39622
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro - WordPress Directory & Listing Theme
Researcher
10.0
CVSS Rating
Critical (10.0)
CVE-ID
CVE-2024-38795
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro Plugin
Researcher
9.9
CVSS Rating
Critical (9.9)
CVE-ID
CVE-2024-39620
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro Plugin
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-6460
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Grow by Tradedoubler β Advertiser Plugin for WooCommerce
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-39619
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro Plugin
Researcher
9.8
CVSS Rating
Critical (9.8)
CVE-ID
CVE-2024-6459
Patch Status
Unpatched
Published
Jul 27, 2024
Affected Software
News Element Elementor Blog Magazine
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-38793
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Great Restaurant Menu WP
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6152
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Flipbox Builder
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6589
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
LearnPress β WordPress LMS Plugin
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-39624
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro - WordPress Directory & Listing Theme
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-39623
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro - WordPress Directory & Listing Theme
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6431
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Media.net Ads Manager
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-39633
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
PowerPack for Beaver Builder
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-39634
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
PowerPack Pro for Elementor
Researcher
8.8
CVSS Rating
High (8.8)
CVE-ID
CVE-2024-6756
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
8.3
CVSS Rating
High (8.3)
CVE-ID
CVE-2024-39621
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
ListingPro Plugin
Researcher
8.1
CVSS Rating
High (8.1)
CVE-ID
CVE-2024-6885
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
MaxiBlocks: 2200+ Patterns, 190 Pages, 14.2K Icons & 100 Styles
Researcher
7.3
CVSS Rating
High (7.3)
CVE-ID
CVE-2024-6750
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
7.3
CVSS Rating
High (7.3)
CVE-ID
CVE-2024-7027
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
WooCommerce - PDF Vouchers
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-6828
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Redux Framework
Researcher
7.2
CVSS Rating
High (7.2)
CVE-ID
CVE-2024-6753
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
6.6
CVSS Rating
Medium (6.6)
CVE-ID
CVE-2024-39630
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Timetable and Event Schedule by MotoPress
Researcher
6.5
CVSS Rating
Medium (6.5)
CVE-ID
CVE-2024-6755
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-38791
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
AI Engine
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6629
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
All-in-One Video Gallery
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6896
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
AMP for WP β Accelerated Mobile Pages
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6897
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
aThemes Starter Sites
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6627
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Happy Addons for Elementor
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6634
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Master Currency WP
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-3896
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
Photo Gallery, Images, Slider in Rbs Image Gallery
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-5818
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Royal Elementor Addons and Templates
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6752
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6458
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
WooCommerce Product Table Lite
Researcher
6.4
CVSS Rating
Medium (6.4)
CVE-ID
CVE-2024-6930
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
WP Booking Calendar
Researcher
6.3
CVSS Rating
Medium (6.3)
CVE-ID
CVE-2024-6751
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-39631
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
Photos, Files, YouTube, Twitter, Instagram, TikTok, Ecommerce Contest Gallery β Upload, Vote, Sell via PayPal, Social Share Buttons
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-3246
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
LiteSpeed Cache
Researcher
6.1
CVSS Rating
Medium (6.1)
CVE-ID
CVE-2024-5744
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Wp EMember
Researcher
5.8
CVSS Rating
Medium (5.8)
CVE-ID
CVE-2024-6591
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Ultimate WordPress Auction Plugin
Researcher
5.5
CVSS Rating
Medium (5.5)
CVE-ID
CVE-2024-6661
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
ParityPress β Parity Pricing with Discount Rules
Researcher
5.4
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-4410
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
IgnitionDeck Crowdfunding Platform
Researcher
5.4
CVSS Rating
Medium (5.4)
CVE-ID
CVE-2024-6754
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Social Auto Poster
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6547
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Add Admin CSS
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6548
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Add Admin JavaScript
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6549
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Admin Post Navigation
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6545
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Admin Trim Interface
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6566
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Aramex Shipping WooCommerce
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6569
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Campaign Monitor for WordPress
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-38794
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Custom Query Blocks
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-39625
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Icegram Engage β Ultimate WP Popup Builder, Lead Generation, Optins, and CTA
Researcher(s): Unknown
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6573
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Intelligence
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-38792
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Language Translate Widget for WP β ConveyThis
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6546
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
One Click Close Comments
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6571
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Image SEO β AI-Driven Image SEO Optimizer
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-5614
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Piotnet Addons For Elementor
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-1798
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Tutor LMS β Migration Tool
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-5861
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
WP EasyPay β Square for WordPress
Researcher
5.3
CVSS Rating
Medium (5.3)
CVE-ID
CVE-2024-6553
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
WP Meteor Website Speed Optimization Addon
Researcher
4.9
CVSS Rating
Medium (4.9)
CVE-ID
CVE-2024-6703
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6518
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6521
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6520
Patch Status
Patched
Published
Jul 26, 2024
Affected Software
Contact Form Plugin by Fluent Forms for Quiz, Survey, and Drag & Drop WP Form Builder
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-6724
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Generate Images β Magic Post Thumbnail
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-39629
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
Himalayas
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-39627
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
Photo Gallery, Sliders, Proofing and Themes β NextGEN Gallery
Researcher
4.4
CVSS Rating
Medium (4.4)
CVE-ID
CVE-2024-39626
Patch Status
Unpatched
Published
Jul 22, 2024
Affected Software
Pretty Simple Popup Builder
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-5028
Patch Status
Patched
Published
Jul 22, 2024
Affected Software
CM WordPress Search And Replace Plugin
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-6836
Patch Status
Patched
Published
Jul 23, 2024
Affected Software
Funnel Builder for WordPress by FunnelKit β Customize WooCommerce Checkout Pages, Create Sales Funnels, Order Bumps & One Click Upsells
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-39628
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
Ninja Forms β The Contact Form Builder That Grows With You
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-1804
Patch Status
Unpatched
Published
Jul 26, 2024
Affected Software
Tutor LMS β Migration Tool
Researcher
4.3
CVSS Rating
Medium (4.3)
CVE-ID
CVE-2024-39635
Patch Status
Patched
Published
Jul 24, 2024
Affected Software
Youzify β BuddyPress Community, User Profile, Social Network & Membership Plugin for WordPress
Researcher
As a reminder, Wordfence has curated an industry leading vulnerability database with all known WordPress core, theme, and plugin vulnerabilities known as Wordfence Intelligence.
This database is continuously updated, maintained, and populated by Wordfenceβs highly credentialed and experienced vulnerability researchers through in-house vulnerability research, vulnerability researchers submitting directly to us through our Bug Bounty Program, and by monitoring varying sources to capture all publicly available WordPress vulnerability information and adding additional context where we can.
Click here to sign-up for our mailing list to receive weekly vulnerability reports like this and important WordPress Security reports in your inbox the moment they are published.
The post Wordfence Intelligence Weekly WordPress Vulnerability Report (July 22, 2024 to July 28, 2024) appeared first on Wordfence.
CVSS3
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
High
EPSS
Percentile
39.7%