Vulnerabilities in UPQODE

4 results

CVE-2024-38743MEDIUMWordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30544MEDIUMWordPress Whizzy plugin <= 1.1.18 - Broken Access Control vulnerabilityEPSS 0.4%CVE-2024-30543MEDIUMWordPress Whizzy plugin <= 1.1.18 - Insecure Direct Object References (IDOR) vulnerabilityEPSS 0.4%CVE-2024-38744HIGHWordPress Plum: Spin Wheel & Email Pop-up plugin <= 2.0 - Broken Access Control to Unauth Stored XSS vulnerabilityEPSS 0.3%